CN1249048A - Method, system and device for authenticating persons - Google Patents

Abstract

The invention concerns a method, system and device for authenticating a user or group of users of a telecommunication transmitting apparatus which consists in collecting the user's biometric codes, updated in a point of presence and stored in a biometric server as well as on personal SIM cards. The authentication is carried out by comparing current biometric codes with the biometric codes stored on the SIM cards by means of trusted third parties (TTP), the current biometric codes being retrieved from current video data transmitted by a n integrated video detector to a telecommunication transmitting apparatus or an apparatus external thereto. Depending on the outcome of the authentication, the use of the telecommunication transmitting apparatus can be authorised or prohibited, or the result can be transmitted to an external protected device or still to an intermediate service supplider who, in turn, can respectively grant or deny access to the device and to the services.

Description

Method, system and apparatus for determining the authenticity of a person

The invention relates to a method, a system and an arrangement for determining the authenticity of a user or a group of users of a communication terminal.

In addition to conventional methods of identifying persons using photographs and personal documents, methods of identifying persons using biometric features are disclosed in the prior art. In these methods, measurable and ingestible body characteristics are recorded as biometric codes and compared at the moment of identification with corresponding body characteristics of a person to be identified. Known examples of such features include fingerprints, eye patterns, facial contours or voice features.

It is well known that personal computers (PCs) can be equipped with various means, in addition to external video cameras, which allow the PC to capture a user's face, to be precise several facial features, during the learning process, and later These facial features are reused for authentication purposes at times where the PC only allows the user to access the PC when the PC recognizes the facial features again.

The combination of a video sensor with a communication terminal is known in parallel with a videophone, and also a mobile version of the videophone, in which a mobile radiotelephone is combined with a video camera.

A method is described in DE 39 43 097 A1 for transmitting biometrically measurable data like eye samples or fingerprints as search concepts for finding stored medical data via a communication network (in addition with mobile phones) . In this method an individual is essentially identified with biometric features so that his medical data can be accessed. However, this does not involve checking the authenticity of this individual or guaranteeing the authenticity and irrefutable origin of the data exchanged via the communication network in this method.

The object of the present invention is to propose a new and improved method and system for determining the authenticity of a user or a group of users of a communication terminal.

This object is achieved according to the invention in particular by the characterizing elements of independent claims 1 , 24 and 34 . Furthermore, this object is also achieved by a system according to independent claim 48 . Furthermore, further advantageous embodiments result from the related claims and the description.

These objectives are achieved in particular by the present invention in that the characteristics of the body are stored securely as biometric codes on a personal SIM card and the user enters this SIM card into a communication device which determines the reality from the user. The human body characteristics and the actual biometric codes are determined therefrom, and these codes are compared with the biometric codes stored on the SIM card for the purpose of authenticating the user. The advantage of this is that a personal card can identify the user in different communication terminals, the user does not have to use an access code that may often be forgotten or may even be entered illegally, and is unlikely to be authenticated, for example by theft or by accident. Users who pick up and misuse the obtained SIM card. An additional advantage is also that a SIM card can also be provided for a user group by storing the biometric codes of all users belonging to this group on the SIM card.

In order to prevent misuse of identification, eg by photographic simulation of human characteristics, human movements are also included in the biometric code.

According to the invention, the authentication of the user by means of the communication terminal can be used to enable or disable the use of the communication terminal by the user depending on the result of the authentication. According to the invention, however, the authentication result can also be transmitted wirelessly, in particular via a mobile communication terminal, to an external secure device, so that the external secure device can allow or disable the user according to the authentication result. Visit its business or building.

According to the invention, the first acquisition of the biometric code takes place in a point of presence (POP) connected to the communication network. From there, these codes are securely transmitted via the communication network to a biometric server, where the codes are stored in a table, where at least one biometric code in the table is assigned to a corresponding user. Supplementation and updating of biometric codes can also be performed in the POP. Furthermore, the invention can be used to update the biometric code directly from the communication terminal, if the majority of the biometric code is already known to the user concerned on the biometric server.

In the present invention, security services such as trusted third party (TTP) services are first used when authenticating and transmitting biometric codes, in order to guarantee the confidentiality of the source, authenticity, irrefutable nature, and to ensure that hereby The integrity of data exchanged by communication networks, and the assurance of the authenticity of the transmitters in which these data are exchanged.

A kind of implementation of the present invention is illustrated below with an example. Embodiments are described by the following figures:

Figure 1 shows an overview of a mobile communication terminal device connected to the communication network with a communication network and with a SIM card and a video sensor, Figure 1 also shows a biometric with a connected table and a SIM server server, a display point and a safety device.

Reference number 9 relates to a point of presentation (POP) which is connected, for example, to a retail point of a network operator or a service company. The display point 9 has, for example, at least one computer which is also used as a communication terminal, in particular a personal computer or a workstation which is connected to a communication network 5 , for example a fixed network 15 . The display point 9 also has a peripheral device (not shown) connected to the computer for capturing human features, for example a video camera connected to the computer via a cable and a video interface card. The computer is equipped with a program which can access peripheral devices, control them and in particular read, intermediate store and process the data acquired by peripheral devices. The program also has a user interface with which the program can be operated, for example, by an operator who is an employee of POP9. The user surface helps the operator to capture the user's physical characteristics, such as the user's face 7, eye pattern 6 or fingerprints 8, by means that the program has elements known to specialists in order, for example, to calibrate the video camera, adjust the contrast, suitably The image segment is represented, and the operator is notified when the programmed biometric code is produced, after the user surface has been checked for authentication purposes by the user in situ.

Especially for the acquisition of human motions it is necessary that the program instructs the user and the operator via the user surface, for example to perform certain movements like eg mouth or eye movements. It is important to mention here that a variant of the user surface can be implemented in such a way that the uptake of the biometric code by the user surface is fully automated and does not require an operator, but the instructions are given directly to the user . In this variant, the computer with its display screen and video camera is arranged, for example, as is known from, for example, photo cameras or automatic teller machines.

In addition to visual biometric codes, acoustic features can also be recorded correspondingly and with peripheral devices such as microphones and audio interface cards and stored as biometric codes.

The recorded and processed biometric codes of a user can be stored in the corresponding individual user profile, but these codes can also be assigned to a user group. The program and its user interface have corresponding components that are easily executable by professionals in order to record the personal data associated therewith and store them in the corresponding user profile and/or user group profile. In addition, other security information such as security levels can also be used here, in order to divide the security device 13 into different levels of access rights for different services, for example, so that the access rights of the user can be restricted to calls via the mobile radio telephone 1, for example. , while other users are additionally allowed to implement additional functions such as the selection and execution of specific services via the mobile radiotelephone 1 . Further examples of other security information that may be entered and stored are specifications for e.g. Local descriptions for certain geographical areas, or individual access codes.

It is important to check the assignment of the biometric code to the user profile or user group profile, for example only by the operator and under strict identification conditions, for example by means of a photo with a photo and possibly with a third party present. This allocation is made by multiple official documents of the certificate confirmed by the author to prevent abusive allocation.

At the end of the recording of the biometric code, the program of the computer securely transmits the user profile or user group profile with the biometric code and security information via the communication network 5 to the computer for managing the biometric code. , hereinafter referred to as the biometric server 10, and stored there for the corresponding user or corresponding user group in a table 11 connected 19 to the biometric server 10. It is clear to the person skilled in the art that there are different possibilities of implementing the biometric server 10 with the table 11, for example the table 11 can be in a database server which is co-located on a computer with the biometric server, Alternatively, the server is located on a separate computer connected to the computer of the biometric server 10 via a communication network. For professionals, there are even different variants for storing information in table 11 which are not described in detail here. The same information is also stored on the user's personal SIM card 3, especially on the GSM card, or possibly on several SIM cards 3 of the user group in the corresponding table 4, by combining them From the POP 9 to the SIM server 12, and from there according to the SICAP method described in EP 0689 368 B1, by means of a dedicated short message via the mobile radio communication network, for example transmitted to the SIM card according to the GSM standard, and stored in There. In a further variant, the SIM card 3 is inserted into a corresponding (not shown) interface of the corresponding computer in the POP9, and the program stores the information securely in Table 4. The individual SIM card 3 thus can then be handed over to its user or its user group.

For secure transmission and storage of biometric codes, first of all by means of security services, such as trusted third party (TTP) services, in order to guarantee the confidentiality, authenticity, irrefutable and integrity of the transmitted data as well as to guarantee these The authenticity of the transmitter of the transmitted data. It is also entirely possible to encode by means of the point-to-point method.

In addition, possible other services are also provided in POP 9, especially services for updating biometric codes due to age-dependent changes, or services for supplementing other biometric codes or providing services for supplementing through Professionals implement additional safety information services that may be performed as listed above.

The user can insert his personal SIM card 3 into the communication terminal 1 and switch it on. In this example, communication terminal 1 is a mobile radiotelephone 1 which is equipped with a video sensor 2 for recording human features such as eyes 6 , facial features 7 or fingerprints 8 . The video sensor 2 can be built directly into the mobile radiotelephone 1, or the video sensor can be plugged, for example, into the interface for the SIM card 3 in the mobile radiotelephone 1 by means of an adapter, which itself includes an interface for receiving the SIM card 3, for example. . After switching on, for example, an authentication program located on the SIM card 3 is started and, for example, by means of a display (not shown) of the mobile radio telephone 1, the user is asked to look at the video sensor 2, to press a certain finger on the video sensor 2 and/or Speak into the mobile radiotelephone 1. The identification program buffers the data recorded with the video sensor 2 and optionally with the not-shown microphone of the mobile radiotelephone 1, from which the actual biometrics buffered and compared with the stored biometric code 4 are processed. Learn to code. In addition to this direct comparison, for example, the authenticity and integrity of the stored biometric code 4 can be verified by the biometric server 10 by means of a TTP transaction. If the comparison of the actual biometric code with the biometric code 4 stored on the SIM card 3 yields a positive result, and the stored biometric code 4 is positively authenticated by the biometric server 10, allowing for example Continue to use mobile radiotelephone 1. Otherwise, further use of the mobile radiotelephone 1 by this user can be prohibited and the mobile radiotelephone 1 can be switched off, for example. The permission can remain until the mobile radiotelephone 1 is switched off again, or it can also be time-limited in that the user has to be re-authenticated after a predetermined period, e.g. also during the use of the mobile radiotelephone 1 Implement this automatically.

The SIM card 3 first communicates with the biometrics server 10 by means of a dedicated short message within the communication network 5, such as by means of the GSM standard via the mobile radio communication network 16, which is sent to a SIM server 12, which is connected to the biometric server 10 via a connection 17. And on the communication network 5, these private short messages are transmitted to the server 10 of biometrics for processing through the connection 18 according to the SICAP method explained in EP 0689 368 B1.

If the majority of biometric codes 11 is known on the biometric server 10 of the user, it is possible to update, for example age-dependently changed biometric codes 11 directly from the mobile radio telephone 1 . The prerequisite for this is that the user has already been authenticated by at least one second biometric code which does not need to be changed, and that the quality of the video information to be used for updating a first biometric code meets predetermined minimum requirements, which can For example requirements for minimum light conditions or image contrast, or also requirements for maximum deviation of the new biometric code from the old biometric code.

In a variant, the identification is at first not used as a check for the use of the mobile radiotelephone 1, but ensures that the results of the identification carried out by the above list are wirelessly transmitted to an external safe device 13, which then accordingly allows or Access to device 13 is prohibited. Along with the results of the authentication, personal data of the user can also be transmitted to the insured device 13 , so that the insured device 13 can grant or deny access based on these personal data of the authenticated user. In a further variant, together with the result of the authentication, the security information of the user, such as the security level, the specification of the location and the specification of the validity period, are transmitted to the safe device 13, which can make an authorization or prohibition of access. decision. In a further variant, the insured device 13 transmits upon request information for its authentication to the mobile radiotelephone 1, whereby the mobile radiotelephone 1 uses during the authentication process by means of, for example, information such as security level, location specification and expiration date. As stated, other security information about the user may also be used to make decisions regarding user access to the associated secured device 13 and may be transmitted to the secured device 13 . The external secured device 13 is, for example, a device, such as an automatic teller machine or a video terminal for information inquiry, an entrance to a secured building, such as a secure industrial manufacturing facility, a police barracks or a nuclear power plant, or a via Entrance to isolated areas such as military bases, airports or factory areas. Wireless transmission can be carried out, for example, by means of an electrical coil on the SIM card 3 without contact via an inductive connection 14 . The mobile radio telephone 1 can also carry out the transmission to the secure device 13 by means of a contactless infrared interface (not shown) or by means of a short message. For example, the transfer takes place securely by means of a TTP service or in a point-to-point manner.

In a further variant, the video sensor is located outside the radiotelephone 1 , for example in an external safety device 13 . In this variant, the video information is captured by an external video camera and transmitted wirelessly to a mobile radio telephone for evaluation. For example, wireless transmission can be carried out via an inductive connection 14 by means of an electrical coil on the SIM card 3 without contact. The secure device 13 can also carry out the transfer to the mobile radiotelephone 1 by means of a contactless infrared interface (not shown) or by means of a short message. For example, the transfer takes place securely by means of a TTP service or in a point-to-point manner.

It should also be mentioned here that, in addition to the mobile radio telephone 1, other communication terminals such as personal computers, laptops or palmtops can also implement this authentication method, if these communication terminals are equipped with Record the words of SIM card 3 and peripheral equipment of human body characteristics. In addition, the use of authentication need not be restricted to access checks for communication terminals or external secured devices 13, but the authentication can also be used for access checks of services, especially communications via the Internet, which may also be included. Network 5 can dominate the business. In these cases the result of the authentication is transmitted to the relevant service provider, for example to an automated Internet site, which can thus allow or prohibit the service. The result of the authentication may be transmitted to the service provider together with information about the user's access rights to the relevant service, or with the user's personal data, as explained above in connection with the insurance device 13 .

It is entirely possible that the method and system could be offered by service providers on a fee-for-pay basis as a service to third parties eg interested in protecting their installations, buildings, regions or businesses.

Claims (60)

1. A method for determining the authenticity of a user or a group of users of a communication terminal (1), characterized in that the method comprises the following steps: - capture and intermediate storage of video information of human characteristics (6, 7, 8) of a user or group of users in a point of presentation (POP) (9), - processing said intermediately stored video information such that certain features are processed as biometric codes; - store biometric codes in the table (11) of the biometric server (10) and in the SIM card (3) of the user or group of users, assigning the table (4) to a corresponding user , at least one biometric code in 11), - input by the user into the communication terminal (1) of a SIM card (3) containing at least one personal biometric code, - capture and intermediate storage of real video information of at least one human body feature (6, 7, 8) of the user via the video sensor (2), - processing the intermediately stored reality video information of the user such that at least a certain characteristic is processed and intermediately stored as codes of implemented biometrics, - authenticity is determined by comparing at least one of the user's intermediately stored actual biometric codes with at least one of the stored biometric codes (4), where authenticity is considered valid in the case of a positive comparison guaranteed, whereas authenticity is considered unguaranteed in the case of negative comparisons. 2. The method as claimed in the preceding claims, characterized in that during the recording and buffering of the real video information from the video sensor (2), in particular actions are also recorded and included in the determination of authenticity. 3. The method according to one of the preceding claims, characterized in that the intermediate storage of the real video information, the processing and re-intermediation of the video information, and the biometric code (4) passed and stored are implemented by the SIM card (3) ) comparison of the authenticity of the determination. 4. The method according to one of the previous claims, characterized in that, when transmitting at least some signals, the security service of TTP (TTP service) is used in order to guarantee the confidentiality, authenticity, irrefutable nature of the source, and guarantee The integrity of the data exchanged here via the communication network (5) and the authenticity of the transmitter of these exchanged data here. 5. The method according to one of the previous claims, characterized in that in the POP (9) the security information is added to the code of the biometrics under the condition of TTP traffic and stored in the biometrics server (10 ) in the table (44) and stored in the SIM card (3), where these security information are assigned to the corresponding user or user group in the table (4, 11) and are included when authenticity is determined These safety messages are included. 6. Method according to the preceding claim, characterized in that the additional security information comprises a security level. 7. The method as claimed in one of claims 5 to 6, characterized in that the additional security information includes an indication of the validity period. 8. The method as claimed in one of claims 5 to 7, characterized in that the additional security information includes a location specification. 9. The method as claimed in one of claims 5 to 8, characterized in that the additional security information includes an access code. 10. The method as claimed in one of the preceding claims, characterized in that information already present in the POP (9) of the respective user or user group can be updated and supplemented by means of a TTP service. 11. The method according to one of the previous claims, characterized in that the table (4, 11) stored in the biometric server (10) can be updated directly from the communication terminal (1) under the condition of the TTP service and the biometric code in the SIM card (3) of the communication terminal device (1). 12. The method as claimed in one of the preceding claims, characterized in that in particular facial features (7) are processed as biometric codes. 13. The method as claimed in one of the preceding claims, characterized in that in particular the eye sample (6) is processed as a biometric code. 14. The method as claimed in one of the preceding claims, characterized in that in particular a fingerprint (8) is processed as a biometric code. 15. The method as claimed in one of the preceding claims, characterized in that, in addition to visual features, in particular speech features are also recorded as biometric codes. 16. The method as claimed in one of the preceding claims, characterized in that the acquisition of real video information is carried out with a video sensor (2) located in the communication device (1). 17. The method according to one of the preceding claims, characterized in that the recording of the real video information is carried out with a video sensor located outside the communication device (1), where the video information for intermediate storage and further processing is transmitted to the communication device (1). on the device (1). 18. The method according to the preceding claim, characterized in that the transmission of real video information to the communication device (1) is carried out inductively (14) via a coil in the SIM card (3). 19. The method according to the preceding claim 17, characterized in that the transmission of the reality video information to the communication device (1) is carried out by means of infrared rays. 20. The method according to the previous claim 17, characterized in that the transmission of the real video information to the communication device (1) is carried out by means of short messages. 21. The method as claimed in one of claims 17 to 20, characterized in that the video information is transmitted to the communication device (1) by means of a TTP service. 22. The method according to one of the preceding claims, characterized in that a dedicated signal is implemented between the SIM card (3) in the communication terminal (1) and the biometric server (10) via the SIM server (12) Communication. 23. The method according to one of the preceding claims, characterized in that the use of the communication terminal (1) is allowed for situations in which the authenticity of the user is guaranteed, and the use of the communication terminal (1) is not allowed for situations in which the authenticity of the user is not guaranteed ( 1). 24. Mobile device (1) for communication via radio, comprising an interface for receiving a SIM card (3) and a video sensor (2) for capturing video information, characterized in that the device has storage means, In order to store the biometric code (4), the means comprise processing means to process certain features from said video information, and the means comprise comparing means to compare these determined features with the stored biometric code (4 )Compare. 25. Device (1) according to the preceding claim, characterized in that it comprises a mobile radiotelephone into which the video sensor (2) is built directly. 26. The device (1) as claimed in claim 24, characterized in that the device comprises an adapter into which the video sensor is incorporated. 27. The device (1) according to one of claims 24 to 26, characterized in that it comprises a device located in said interface for receiving a SIM card (3) and said biometric code (4) is stored in One of the SIM cards (3). 28. The device (1) according to the preceding claim, characterized in that said storage means, processing means and comparison means are implemented on a SIM card (3). 29. The device (1) as claimed in one of claims 24 to 28, characterized in that the processing device is specially designed to determine the anatomical characteristics (6, 7, 8) of persons from the video information. 30. Device (1) according to this preceding claim, characterized in that the human body feature for which the treatment device is specially arranged comprises a face (7). 31. The device (1) as claimed in one of claims 29 to 30, characterized in that the anatomical feature for which the treatment device is specially assigned contains an eye pattern (6). 32. The device as claimed in one of claims 29 to 31, characterized in that the human characteristic for which the processing device is specially assigned contains a fingerprint (8). 33. The device as claimed in one of claims 24 to 32, characterized in that the biometric code also includes body movements. 34. The Subscriber Identity Module (SIM) card (3) used by the communication terminal equipment (1), is characterized in that, in the memory (4) of the SIM card (3), the real information used to determine a person or a group of people is stored. Sex at least one biometric code. 35. SIM card (3) according to this preceding claim, characterized in that the stored biometric code contains facial features (7). 36. SIM card (3) according to one of claims 34 to 35, characterized in that the stored biometric code contains an eye sample (6). 37. SIM card (3) according to one of claims 34 to 36, characterized in that the stored biometric code contains a fingerprint (8). 38. SIM card (3) according to one of claims 34 to 37, characterized in that the stored biometric code (4) also contains speech characteristics in addition to visual characteristics. 39. The SIM card (3) according to one of claims 34 to 38, characterized in that additional security information is stored on the SIM card (3). 40. SIM card (3) according to the preceding claim, characterized in that the stored security information contains a security level. 41. The SIM card (3) as claimed in one of claims 39 to 40, characterized in that the stored security information contains an indication of the validity period. 42. SIM card (3) according to one of claims 39 to 41, characterized in that the stored security information contains a location specification. 43. SIM card (3) according to one of claims 39 to 42, characterized in that the stored security information contains an access code. 44. The SIM card (3) according to one of claims 34 to 43, characterized in that the SIM card has means for buffering video information, in order to process certain features and buffer these from the buffered video information determined characteristics in order to compare said intermediately stored characteristics with said stored biometric code (4) and to carry out various other steps depending on the result of this comparison. 45. The SIM card (3) according to one of claims 34 to 44, characterized in that the SIM card possesses a digitally transmitted signal for writing and decoding, especially by means of a trusted third party (TTP) service. and coded signals so that the confidentiality, authenticity, irrefutable and integrity of the origin of these signals and the authenticity of the transmitter of these signals are assured, and so that the transmission of these signals to a biometric on the server (10). 46. The SIM card (3) as claimed in one of claims 34 to 45, characterized in that the SIM card has means for composing and decoding signals, in particular in a point-to-point manner. 47. The SIM card (3) according to one of claims 34 to 46, characterized in that the SIM card comprises a SIM card via which it can inductively (14) exchange data relating to its safety with an external safe device (13) of an electric coil. 48. A system for implementing the method according to claims 1 to 23 by means of a mobile device (1) according to claims 24 to 33, which devices contain a SIM card (3) according to claims 34 to 47, and which devices are As communication terminal equipment (1) connected to each other via a communication network (5). 49. System according to the preceding claim, characterized in that the communication network (5) comprises a mobile radio communication network. 50. System according to the preceding claim, characterized in that the mobile radio communication network is a mobile radio communication network according to the GSM standard. 51. System according to one of claims 48 to 50, characterized in that the communication network (5) comprises a fixed network. 52. The system as claimed in one of claims 48 to 51, characterized in that the communication network (5) includes the Internet. 53. System according to one of the preceding claims 48 to 52, characterized in that the system comprises other communication terminals, in particular personal computers, laptops and palmtops, in which at least one video sensor is equipped, and these The communication terminal equipment and the computer are interconnected via a communication network (5). 54. System according to one of claims 48 to 53, characterized in that the system additionally comprises external safety devices (13) which can be communicated wirelessly and by means of a TTP service with the communication terminal (1 ) communication. 55. System according to the preceding claim, characterized in that the securing device (13) communicates with the SIM card (3) in the communication terminal (1) by means of induction (14). 56. The system as claimed in claim 54, characterized in that the securing device (13) communicates with the communication terminal (1) by means of infrared radiation. 57. The system as claimed in claim 54, characterized in that the securing device (13) communicates with the communication terminal (1) by short message. 58. The system as claimed in one of claims 48 to 57, characterized in that the system includes a safety device (13) equipped with a video camera. 59. System according to one of claims 48 to 58, characterized in that the system comprises a SIM server (12) which communicates with the biometric server (10) via the SIM card (3) in the communication terminal (1) with specific information ). 60. System according to one of claims 48 to 59, characterized in that the system comprises biometric servers (10) which are connected to tables (11) in which biometric codes are stored, in which table At least one biometric code in (11) is assigned to a corresponding user.