Patent Publication Number: US-2005144473-A1

Title: Personal or personalizable device for the conditional use of electric or electronic appliances, method of use

Description:
CROSS REFERENCE TO RELATED APPLICATIONS  
      The present application is a continuation of, and claims the benefit of the earlier filing date of U.S. application Ser. No. 09/536,985, filed Mar. 29, 2000, which claims priority to French Application No. 99-03862, filed Mar. 29, 1999, respectively. The contents of each of the above-identified applications is incorporated herein by reference. 
    
    
     BACKGROUND OF THE INVENTION  
      1. Field of the Invention  
      The present invention relates to a personal or personalizable device for the conditional use of electric or electronic appliances.  
      2. Discussion of the Background  
      Many electrical or electronic devices can be used without their usual users&#39; agreement in absence of devices allowing the control of the start of their run in a sufficiently secured way. The codes usually installed on devices—such as TV sets or doors—are easily bypassed and require a growing memorization of numerical codes or the possession of multiple magnetic cards.  
      Numerous previous works allowed the development of devices aimed at increasing the security associated with access to premises, with bank operations, or with electronic keys of various applications. For example:  
      U.S. Pat. No. 3,821,704 (Sabsay) and U.S. Pat. No. 3,906,447 (Crafton) describe a security system for the control of access to premises. The device used puts in practice a key controlled by a decoding circuit comparing the data of a memory with those of the key. These patents do not give any description of a personalizable key, or the insertion of the decoding (identification and comparison) circuit in an essential site of an electric or electronic circuit of the appliance.  
      European patent application no. 43 270 concerns an unlocking system, in particular for the opening and closing of doors, by comparison of a code on a card with the content of a memory and the possibility of modifying the content of the memory.  
      European patent application no. 122 244 discloses a door locking-system consisting in a magnetic card, a reader of this card, a memory and a clock which allows the opening of the door if the content of the card and the memory agree during a lapse of time set by the clock.  
      British patent no. 2 126 647 describes an invention which allows to re-code an electronic locking system by using a master-key, in order to prevent the access to premises with a previous key.  
      European patent application no. 152 678 covers a locking system for hotel doors consisting in an electromagnetic system controlled by a microprocessor recognizing 5 levels of access, said system detects the code of a magnetic card inserted in an appropriate lock and allows the opening of the door.  
      French patent no. 2 715 748 [FR 9 401 202] concerns a system of automatic payment made secure by a card with a built-in chip.  
      U.S. Pat. No. 4,404,464 discloses an appliance for making an electrical contact with a portable electronic card, such as a card with a built-in chip.  
      Japanese patent no. J 08 326 375 describes a double security system for a door electronic key with a secret code to be typed on a key-pad and a recordable identification card compared with a memory.  
      PCT patent application no. 95 570 16 concerns the opening of a door with a card.  
      PCT patent application no. WO 97 02 200 (ERICSSON) describes a device comprising a signal generating unit that allows to identify which key of a keyboard is used.  
      European patent application no. 98 1042 84 (Olympus Optical Co.) discloses a procedure for the modulation of numerical data to send or record.  
      European patent no. 97 934 683 (Philips Electronics N.V.) describes an improved system of locking transmission.  
      On the other hand, to the inventors&#39; knowledge, no previous document discloses the use of a key or personalizable substrate (or medium) for the control of the conditional operation of an electronic or electric appliance that uses an identification circuit localized on an essential electric or electronic part of said appliance.  
      By “essential part” one means any element which—if not active—will not allow the operation of the device. One means for example a printed or integrated circuit such as the mother-board or the micro-processor of a computer or the reception card of a TV or video recorder or the control circuit of household appliances, such as washing machine, fridge or photographic appliances or else machines controlled by electric circuits (such as all kinds of vehicles).  
     SUMMARY OF THE INVENTION  
      The present invention relates to a device associated to an electric or electronic appliance consisting in one part of a personalized or personalizable substrate (key) and a reader of said substrate and on the other part of an electronic circuit of identification comprising a) a memory and b) a circuit comparing the memory content and the data read by the reader of the substrate (key), said identification circuit (electric or electronic) being placed on an essential electric or electronic circuit of the appliance. 
    
    
     BRIEF DESCRIPTION OF THE DRAWINGS  
       FIG. 1 . Scheme of the device principle such as described in the invention: 
          (A) is a substrate personalizable by the presence or absence of modifications in this substrate. This substrate can be a key or a pocket size cardboard or plastic card, for example of the size of a credit or phone card.     (B) Is a reader of the said substrate consisting of an ensemble of electric or electronic circuits activated or de-activated by the introduction of the substrate in the reader.     (C) is a memory containing a comparison code.     (D) is an identification or comparison circuit (possibly on the same chip as the memory, as indicated by the dashed line) capable of reading the data of the reader and/or those of the memory and of activating, if the data of both sources are identical, one (or many) principal elements (such as BIOS, microprocessor, clock, demodulator, etc.) of an essential circuit of the appliance (such as mother board or printed circuit) on which is implanted the identification circuit (D) and/or the memory (C).        
       FIG. 2 . Possible implementation of a SPEK or substrate. The output of the card reader and the memory are compared by the logical XOR gates (output tension ‘0’ if both inputs are identical) which outputs are combined in a logical NOR gate (output tension ‘1’ only if all inputs are ‘0’). The output of the logical NOR gate is used to set a flip-flop which controls the main circuit and possibly allows writing in the memory (type EEPROM, FLASH, etc.), in which case the memory is connected to the outputs of the card reader. Writing in the memory is done by introducing in the reader a new perforated card coded differently and validating writing by pushing on switch M (logical tension ‘1’) which is one of the inputs to a logical AND gate (output tension ‘1’ only if all inputs are ‘1’), the other input being the output of the flip-flop that controls the main circuit (logical tension ‘1’ when the circuit is working).  
       FIG. 3 . Possible implementation of a SPEK by a system of micro-switches in the card reader and a system of switches as memory. When all gates are adequately connected the input tension +V (‘1’) sets a flip-flop that controls the main circuit and possibly the physical and/or visual access to the memory, in order to prevent its fraudulent modification.  
       FIG. 4 . Example of a program implemented on a micro-control chip comparing the output of reader L and memory M, activating system S or modifying the content of the memory if the system is already activated and if the user has pushed on the ‘reset M’ button.  
       FIG. 5 . Example of the use of a SPEK for the control of the opening of a door by the activation of a lock S, for example an electromagnetic type lock. The memory M might be a switch-type memory, (see  FIG. 6 ), and comprises also an identification circuit such as described in  FIG. 2 . It is located inside the premises, which access the door controls. The reader L accepts perforated substrates, (see  FIG. 7 ). It is located outside the premises.  
       FIG. 6 . Example of a switch memory that might be used in the system described in  FIG. 5 . The switches (push-button type) activated by the user (logical output ‘1’) light up.  
       FIG. 7 . Example of a perforated substrate that might be used in the system described in  FIG. 5 . The holes perforated in the card correspond to the switches lighted in the memory. 
    
    
      By personalized or personalizable substrate or medium, one means a material element modifiable by the user and capable of receiving data recognized or recognizable by a device of reader type.  
      The present invention has for object to provide a procedure for the conditional operation of electronic or electric appliances that does not require the memorization of codes by the user through the use of a substrate easily personalizable and modifiable after every re-activation of the appliance, the said substrate being able to activate different appliances belonging to the same user. The same personalizable substrate can be used to secure many appliances of different types, for example TV-set, freezer or door of regulated access.  
      The invention concerns also appliances and devices containing the following elements or related to those (see  FIG. 1 ):  
      A substrate (A) which is personalizable by the presence or absence of modifications in the said substrate. This substrate can be a key or a pocket-size card made of cardboard or plastic, for example the format of a credit or phone card or any other substrate capable of receiving data recognized by a reader (B).  
      A reader (B) of said substrate consisting of an ensemble of electric or electronic circuits activated or inactivated by the introduction of the substrate in the reader. The reader B can be placed inside or outside the appliance to be secured.  
      A memory (C) containing a comparison code.  
      An identification or comparison circuit (D) capable of reading the data of the reader and/or those of the memory and of activating the essential circuit of the appliance or a principal element if the data of both sources are identical.  
      The elements C and D are located inside the appliance on an electric or electronic circuit essential for the operation of the appliance. The elements C and D cannot be disconnected without impairing the operation of said appliance.  
      The invention covers, a device associated to every electric or electronic appliance consisting, on one hand, in a personalized or personalizable substrate (key) and a reader of said substrate and, on the other hand, in an electronic identification circuit comprising a) a memory and b) a comparison circuit between the memory and the data read by the reader of the substrate (key), said identification circuit (electric or electronic) being placed on an essential electric or electronic circuit of the appliance (such as the mother-board of a computer or the printed circuit of an electric or electronic appliance, as a TV-set for example). This device may comprise an identification circuit to control the operation of the circuit or an essential part of the appliance by allowing it to be powered or by activating the microprocessor of the appliance or a logic chip.  
      The invention concerns every electric or electronic appliance containing or associating for its operation the device having the characteristics described above.  
      The invention also covers a method for the modification of the memory of the identification circuit consisting in introducing a first personalized or personalizable substrate in the reader (no. 1), putting the appliance under tension, then taking out the original substrate, then introducing a second substrate (no. 2) aimed to replace the first substrate, the said second substrate having characteristics different of the first substrate and validate by activating or deactivating a circuit in order to replace the old data in memory by the new ones read by the reader. A variant of this procedure consists in first putting the appliance under tension then introducing the first substrate in the reader then proceeding as before. An other variant in order to modify the memory consists in introducing the personalizable substrate before the appliance is under tension, then after validation of the recognition of the authorized user by the identification and comparison circuit, to allow the modification of the memory by the user, for example by changing the position of micro-switches or push-buttons linked to the memory, by typing a code on a keyboard or by all other means allowing to modify the state or the content of the memory present in part C of the device according to the invention. It is understood that in this variant the user will have to modify the personalizable substrate in an adequate manner to have access to the appliance.  
      A first implementation of a device for the starting of an appliance containing a part A and a part B is shown in  FIG. 1 , said device can be secured by a procedure of identification modifiable after every reactivation of the appliance.  
      In the device according to the invention, the substrate of part A is any element comprising a surface modifiable by the user such as to generate a code, said code allowing to obtain at least 1000 different combinations.  
      In the device according to the invention, the substrate is modifiable by perforating or scratching or coloring or erasing or gluing or ungluing or deforming part of its surface.  
      The invention also concerns a procedure of secured modification of the memory characterized on one hand by the introduction of the personalized or personalizable substrate in the reader, the identification of the user by the identification and comparison circuit and its validation by said circuit and on the other hand by the modification of the memory content by the user. In particular the modification of the memory is done by removing the personalized or personalizable substrate from the reader and replacing it by an other substrate containing the new code and then validating the replacement of the memory content by this new code.  
      Finally, the invention covers a procedure of conditional operation of an electric or electronic appliance characterized by: 
          1) the putting in contact of a substrate equipped with a personal or personalizable code with a reader of this substrate reading said code;     2) the comparison of the data read by the reader with the content of a personal or personalizable memory, said comparison being done by a circuit located on an essential part of the electric or electronic circuit of the appliance.        

      Any power cut of the electric appliance generates the necessity to proceed to an operation of user recognition with the help of the personalized substrate by the memory and/or the comparison-identification circuit.  
      The device according to the present invention also called “secured personal electronic key” (SPEK) controls a main circuit or a critical electronic component in an appliance (such as computer, TV set, video, car-radio, electric door, contact circuit, etc.) and prevents their theft or fraudulent use. The same system can also allow the control of entrance and user identification in secured premises.  
      That system allows—thanks to a unique personalizable key—to control the operation of all the electrical appliances equipped with it. It also offers an absolute security against theft or fraudulent use, the number of possible combinations easily reaching 2 100 =10 30 .  
      That system comprises notably: 
          A) A personalizable substrate or “key”    B) A reader of this substrate     C) A memory     D) An electronic identification circuit comparing the output of the reader and the memory and controlling a main circuit or a critical component (BIOS, memory, central unit, clock, oscillator, demodulator, electromagnetic switch, etc.) of the appliance in question.        

      The personalized or personalizable substrate has preferentially the format type of a credit card, or a similar one in which the user has (possibly himself) effected some modifications in specific places, the existence or not of modifications representing a code. Among the possible modifications of the substrate, one notices without restrictions: the perforation of holes in the card, the scratching (for example of a conducting or reflecting zone), the gluing or ungluing (for example in order to create a conducting or reflecting zone), the coloring (for example blackening) or the erasing of certain places on the substrate.  
      As an example, with the possibility to punch about thirty holes, the users disposes of a billion possible combinations (2 30 ).  
      The possibility for one-self to code his own key on standard and cheap cards (by perforation, scratching, gluing, ungluing, coloring or erasing) allows for the easy duplication of the keys and their quick modification if lost, without a security prejudice and with no need for specialized manpower (locksmith, electrician, etc.).  
      A variant of the substrate might be constituted of two or more regions on the card, each corresponding to a particular code allowing the opening of a function or the access to certain appliances or premises.  
      The substrate reader is an ensemble of electric circuits activated or deactivated during the introduction of the key by the presence or absence of modifications in the substrate.  
      As examples one cites: 
          1) The presence or absence of perforations might or might not turn on a microswitch;     2) If the substrate is lighted on one side the existence of a hole might activate a photo-electric cell on the other side of the card;     3) If the substrate is conducting and powered when introduced in the reader, the existence or not of a contact between the reader and certain zones on the card (determined by perforation, scratching, gluing or ungluing of these zones on the substrate) can help to generate a tension at the output of the micro-switch;     4) If the surface of the substrate is reflecting, the existence of zones reflecting or not on the card (established by perforation, deformation, scratching, gluing, ungluing, erasing or adequate coloring) might, under illumination, be detected by photo-electric cells.        

      The output of the reader is an ensemble of logical tensions (‘0’ or ‘1’) corresponding to the state of the electric circuits (such as micro-switches, micro-contacts, photo-electric cells, etc.) and reflecting the code of the key.  
      The memory is an electric circuit memorizing one (or many) particular state(s) of the reader of the substrate. It can possibly be protected when, without activation of the main circuit, the physical, visual or electric access to the memory and/or writing are unrealizable.  
      Among the electric circuits that can act as a memory, one mentions as examples: 
          (1) A group of switches.     (2) A permanent electronic memory such as: 
            (a) an Electrically Erasable Programmable Read Only Memory (EEPROM) such as the memory NSC EEPROM 256 bits or more (catalogue FARNELL Components, USA),     (b) A FLASH memory (such as INTEL CMOS FLASH 256 Kbits (catalogue FARNELL),     (c) A non-volatile RAM memory (see catalogue FARNELL 1996).    
               

      The purpose of the electronic identification circuit is to compare the outputs of the substrate and the memory. It activates the main circuit—or a critical electronic component—under its control, when the outputs are identical.  FIG. 1  illustrates an operating scheme for that circuit placed inside the appliance to be secured.  
      Depending on the circuit under control, that activation could be done in various ways: for example, by the activation of the functions set, reset, enable, etc., by the activation of an electromagnetic relay or by powering the main circuit.  
      Depending on the degree of security required, of complexity and cost, the electronic identification circuit can be either a microprocessor or a system of logical gates comparing the memory and reader outputs (see  FIG. 2 ), or an ensemble of adequate connections between a switch-type memory and a micro-switch type reader (see  FIG. 3 ).  
      One might advantageously use micro-control circuits (such as the 8 bits SGS microprocessors—ST626X, ARIZONA, PIC16C84, etc., (see catalogue FARNELL Components, USA)) that integrate on a single chip a microprocessor and an EEPROM (possibly also a data RAM and an EPROM memory) and can thus fulfill the double function of memory and identification circuit (see  FIG. 1 ) and example 1 below.  
      For the implementation of the device, two options are present: either the key is left in the reader or it is taken out. If one wishes to take back the key after its introduction without turning off the appliance, the electrical circuit could set a flip-flop that will continue to activate the principal circuit or a critical component indefinitely (or for a determined time-lapse) even after the key has been retracted. In that case, one would possibly have to re-initialize the appliance (re-introduce the substrate, for example the card, turning it off or unplugging it for example) in order to re-secure it.  
      In a secured system, it might be desirable to prevent the access to the memory and/or the modification of its state without authorization. The authorization for the access to and the modification of the memory will preferentially be granted by the activation of the main circuit. When many users share the memory (multiple key system) the authorization of access to the memory can possibly be granted after activation of the main circuit by a competent authority (activation by the substrate or key of a “privileged user”).  
      In a preferred mode of implementation of the invention, the memory, of type permanent electronic memory (EEPROM, FLASH, etc.) cannot be modified but after activation of the main circuit. In other words, an agreement between the key card (or personalizable substrate) and the content of the memory must be established. The activation then permit writing in the memory, preferentially by the introduction of a new key card in the reader (and a possible complementary validation, by an adequate switch). In order to eliminate all possibilities of electronically breaking in the memory, in case of failure of identification, one can contemplate the introduction of a dead time (greater than one second for example and increasing with the, number of failures) before a new identification attempt, (see  FIG. 4 ) or a freezing of the identification system after a finite number of failures, for example after five attempts or a number of attempts corresponding to a really small probability of finding the right code by chance.  
      In an other mode of realization, the access to a memory of type “switch ensemble” might be physically blocked. This can be achieved, for example, with a key or a system of electromagnetic doors or shutters, freed by the activation of the main circuit and allowing the physical access to the memory (the switches).  
      Besides, if the state of the switches cannot be determined visually (push button type), the content of the memory might nevertheless be expressed by small LEDs which will light up, possibly after activation of the main circuit. That option allows to reflect the state of the associated switches and to manually modify them as desired.  
      In all these modes of realization, it thus becomes possible to operate various electrical appliances with a same and unique key, which code (for example the ensemble of perforations) is determined by the user and modifiable by himself, without the need of specialized manpower.  
      In an other mode of realization, the SPEK also allows the control of entrance and identification of the user. This can be achieved by coding (possibly in various places of the substrate) the identity of the user and the opening codes of the appliances and premises to which he is allowed. It is thus possible to use a SPEK in order to allow (or block) the access to certain determined TV channels, by a competent authority ( a privileged user (super-user) such as the parents, for example).  
     EXAMPLES OF THE IMPLEMENTATION AND USE OF A SPEK (OR PERSONALIZED OF PERSONALIZABLE SUBSTRATE)  
     Example 1  
      In a first implementation the outputs of the reader of a perforated substrate are connected by a ribbon cable to the entrance of a micro-controller (type SGS-ST626X) that compares these outputs with its memory M (type EEPROM),  FIG. 1 .  
      In this micro-controller the following program is implemented, see  FIG. 4 . 
          1) READ L: the microprocessor reads the content (outputs) of reader L.     2) If the content of reader L is null (L=0; there is no card in the reader) and if the content of the memory isn&#39;t null (M≠0; the memory has already been initialized) the program returns to (1).     3) If the preceding conditions are not satisfied, the program checks if the main circuit (system S) is already active or not.     4) If the system is not active the program checks if the contents of its memory and the reader are identical (L-M=0?). If yes, the system is activated. If not, the program after a certain time lapse (constant or increasing with every failure) returns to (1).     5) If the system is already active the program checks if the user wants to modify the memory content (reset button M). If yes, its content is replaced by that of the substrate reader, if not the program returns to (1).        

      The deactivation of the main circuit (and/or the micro-controller) can be done by shutting the power (turning off the appliance under control). The reactivation of the main circuit could then be done by turning on the appliance and inserting the perforated card, which can be done simultaneously.  
     Example 2  
      In a second implementation, the outputs of the substrate reader and the outputs of the memory (switch type) are compared one by one by XOR logical gates (logical output ‘0’ if the inputs are identical, ‘1’ if they are different). The outputs of the XOR gates are then combined in a NOR gate (logical output ‘1’, if and only if all the entries are null). Thus the output of the NOR gate is ‘1’, if and only if the contents of the memory and reader agree. The output of the NOR gate sets a flip-flop that activates the main circuit, even after removal of the card from its reader. That flip-flop can be reset such as to de-activate the main circuit by a switch R. Thus, if this circuit is used to activate an electromagnet that allows the opening of a door (see example 4), the closure of this door switches R and de-activates the opening circuit.  
     Example 3  
      In a third implementation, the reader is an ensemble of N micro-switches and the memory an ensemble of N switches. The output of memory switch j is connected to the entry of micro-switch j and the output of this micro-switch to the input of memory switch j+1, (see  FIG. 3 ). Thus the flip-flop which activates the main circuit will be set only if there is a full agreement between the connections of the memory and the reader.  
     Example 4  
      Implementation of a SPEK for the control of a door opening. The reader L (type ensemble of micro-switches) is embedded in the wall in such a way that its opening slit for a perforated substrate sticks out slightly, see  FIG. 5 . The output of the reader is connected by a ribbon cable to an identification and memory circuit (type ensemble of switches) M, as described in example 2. The location of the memory is arbitrary, but preferentially far from the reader (to prevent its access by breaking). The memory consists in a group of switches which light up if active (logical output ‘1’). Its access can be restrained by embedding it in a locked box. The perforated substrate is a card where the user has punched holes at places (numbered) corresponding to the lit switches of the memory, (see  FIGS. 6 and 7 ). When this substrate is introduced in the reader, the identification circuit described in example 2, activates an electromagnetic lock, S which releases the door bolt. The door can be opened and when closed again, it turns on a switch which bolts it.  
      The invention presents many possibilities for adaptation by using elements similar to the ones described in the present application. The adaptations and variants which allow one to obtain the same effects as the device and the same implementation of the procedure are an integral part of the invention.