Patent ID: 7571468
Filing Date: 2009-08-04
Classification: G06F,H04L,H04W

Abstract:
1. A personal authorisation device wearable by a user, comprising: a memory; an input operable to receive user authentication data for authenticating the user, wherein the personal authorisation device is configured to generate validation information from said user authentication data by transforming said user authentication data via a one-way transformation, wherein said validation information comprises a result of said one-way transformation, wherein said user authentication data is not stored within said memory; wherein the memory stores an authorisation code and said validation information generated from the user authentication data, wherein said personal authorisation device is configured to encrypt said authorisation code with an encryption key to generate an encrypted authorisation code, wherein said encryption key comprises said validation information generated from said user authentication data; and an output operable to provide said encrypted authorisation code to an other device configured to protect a resource, wherein said personal authorisation device is configured to enable the user to gain access to the protected resource, wherein to enable the user to gain access to the protected resource comprises providing said encrypted authorisation code to the other device through said output, wherein said other device and said resource are external to the personal authorisation device; and a tamper detector configured to trigger if the personal authorisation device is removed from said user, wherein in response to said triggering the tamper detector is configured to disable use of the personal authorisation device, wherein to disable use of the personal authorisation device comprises preventing output of said encrypted authorisation code subsequent to said triggering.