Source: https://patents.google.com/patent/US9042608B2/en
Timestamp: 2019-07-21 12:13:45
Document Index: 295517684

Matched Legal Cases: ['Application No. 60', 'Application No. 60', 'Application No. 60', 'Application No. 60', 'Application No. 60', 'Application No. 60', 'Application No. 60', 'Application No. 60', 'Application No. 60', 'Application No. 60', 'Application No. 60', 'Application No. 60']

US9042608B2 - Data security system - Google Patents
US9042608B2
US9042608B2 US13/974,289 US201313974289A US9042608B2 US 9042608 B2 US9042608 B2 US 9042608B2 US 201313974289 A US201313974289 A US 201313974289A US 9042608 B2 US9042608 B2 US 9042608B2
US13/974,289
US20130336549A1 (en
Gerald R Black
2010-10-25 Priority to US12/857,819 priority Critical patent/US8520905B2/en
2013-08-23 Application filed by PEN-ONE, INC. filed Critical PEN-ONE, INC.
2013-08-23 Priority to US13/974,289 priority patent/US9042608B2/en
2013-12-19 Publication of US20130336549A1 publication Critical patent/US20130336549A1/en
2015-05-26 Publication of US9042608B2 publication Critical patent/US9042608B2/en
This application is a continuation of and claims priority to co-pending U.S. Ser. No. 12/857,819, entitled “Data Security System” filed on Oct. 25, 2010, and to Ser. No. 13/241,817, entitled “Data Security System” filed on Sep. 23, 2011, now U.S. Pat. No. 8,374,402, which are continuations of U.S. Ser. No. 11/124,016, entitled “Data Security System” filed on Aug. 8, 2005, now U.S. Pat. No. 7,822,232; which is a continuation of U.S. Ser. No. 10/032,591, entitled “Data Security System” filed on Oct. 28, 2001, now U.S. Pat. No. 7,047,419, and are continuations-in-part of each of the following: U.S. Provisional Application No. 60/317,866 entitled “Fingerprint-Based Security System” filed on Sep. 10, 2001; U.S. Provisional Application No. 60/313,084, entitled “Fingerprint Sensing-Multiple Images” filed on Aug. 18, 2001; U.S. Provisional Application No. 60/308,010 entitled “Transponder-Based Security System” filed on Jul. 26, 2001; U.S. Provisional Application No. 60/303,946 entitled “Authenticated Commercial Transaction System” filed on Jul. 9, 2001; PCT Application No. PCT/US01/21,038 entitled “Data Security System” filed on Jul. 5, 2001; U.S. Provisional Application No. 60/299,226, entitled “Pen-Based Transponder Identity Verification System” filed on Jun. 19, 2001; U.S. Ser. No. 09/865,756 entitled “Identity Authentication Device” filed on May 25, 2001, now U.S. Pat. No. 6,970,583; U.S. Ser. No. 09/865,638 entitled “Pen-Based Transponder Identity Verification System” filed on May 25, 2001, now U.S. Pat. No. 6,925,565; U.S. Provisional Application No. 60/286,177, entitled “Pen-Based Identity Verification System” filed on Apr. 24, 2001; U.S. Provisional Application No. 60/281,354, entitled “Pen-Based and Card-Based Identity Verification System” filed on Apr. 4, 2001; PCT Application No. PCT/US00/19,652 entitled “Identity Authentication System and Method” filed on Jul. 18, 2000; U.S. Provisional Application No. 60/217,151, entitled “Identity Authentication Device” filed on Jul. 9, 2000; U.S. Provisional Application No. 60/207,892, entitled “Identity Authentication System and Method” filed on May 25, 2000; U.S. Ser. No. 09/535,411 entitled “Method for Identity Verification” filed on Mar. 24, 2000, now U.S. Pat. No. 6,539,101; U.S. Ser. No. 09/490,687, entitled “Writing Implement for Identity Verification System” filed on Jan. 24, 2000, now U.S. Pat. No. 6,307,956; U.S. Provisional Application No. 60/177,390 entitled “Writing Implement for Identity Verification System” filed on Jan. 24, 2000; U.S. Provisional Application No. 60/163,433 entitled “Writing Implement for Identity Verification System” filed on Nov. 3, 1999; and U.S. Provisional Application No. 60/154,590 entitled “Writing Implement for Identification Verification System” filed on Sep. 17, 1999.
FIGS. 7B and 7C together disclose a simplified logic diagram of another preferred embodiment for requesting access to medium security data for the data security system of FIG. 1, the system supplying the user with misinformation if the remote computer is counterfeit, with the steps in FIG. 7C being the same as those that end the process started in FIG. 7A;
FIGS. 9B and 9C together disclose a simplified logic diagram of another preferred embodiment for requesting access to high security data for the data security system of FIG. 1, the system supplying the user with misinformation if the remote computer is counterfeit, with the steps in FIG. 9C being the same as those that end the process started in FIG. 9A;
Referring now to the drawings, FIG. 1 discloses the preferred embodiment of the data security system of the present invention. The data security system comprises a host processor and a plurality of computing devices. The host computer includes confidential data that is to be accessed only by authorized users. Some of the computing devices are wireless and remote from the host computer. The wireless computing devices are portable and handheld—and may be pen-based as shown in FIGS. 1A, 1B, and 1C, or not pen-based as shown in FIGS. 2A and 2B.
The computing device includes a sensor for capture of a user biometric image—preferably a fingerprint sensor. The fingerprint captures an image of a user's finger prior to each request to access data—guarding against unauthorized access to network data (a network security breach). The fingerprint image sensor can also be captured prior to each request to enter new data to prevent contamination of network data.
As shown in FIGS. 2A and 2B, at least one fingerprint sensor is positioned at one or more strategic sites such that a portion of the hand of the user is in continuous contact therewith during usage of the processor, enabling a continual authentication of the identity of the user with each request for access to each secure record. The fingerprint authentication is captured in an incidental manner as the data request is submitted from the handheld computer to the host processor enabling user identity authentication simultaneously with each request to access the secure record. As shown, the processor includes sensors to capture a thumbprint, the print of the index finger, and a palm print. Also, a palm print sensor can be disposed on the back surface of the computing device of the present invention to supplement or complement the fingerprint sensors. Multiple sensors are recommended for high-security applications (see for example FIGS. 9A and 9B).
FIG. 3A discloses the frontside of another embodiment of a processor device for use in another preferred embodiment of the data security system of the present invention. The fingerprint sensor is positioned in the casing of a palm computer, the casing being used to house the palm computer when used and stored. The casing may also be a wallet or pouch in digital engagement with the processor, either through wire or a wireless mode—enabling identity authentication whenever network access to data is required. The principle advantage of this approach is that registration is conducted through the casing and the computers need not be altered (off the shelf). FIG. 3B discloses yet another full-screen processor for use in the data security system of the present invention. These processors are sometimes referred to as handheld computers in the literature, but are referred to as full-screen processors herein for clarity. The screen is roughly the size of a screen of a PC, except that the computer does not have a conventional keypad. A fingerprint sensor is disposed on one side of the full-screen computer.
FIG. 4A discloses another preferred embodiment of a computing device for use in the data security system of the present invention. The handheld computing device includes a facial image biometric sensor that captures a facial biometric when data access is made from the handheld computing device. FIG. 4B discloses yet another preferred embodiment of a computing device for use in the data security system of the present invention. The computing device is a handheld computer, having a palm image sensor disposed on the backside thereof.
Referring now to FIG. 5, the user registers his or her prints by submitting the thumb, index finger, and/or palm prints to the network in a secure process. The reference print is preferably stored in the host processor for security purposes to prevent user access and tampering. The prints may need to be stored in the system also. Subsequently, when network access is requested, the relevant print or prints are captured and compared against the reference prints. Only upon authentication is network access enabled to authorized users.
Data access is only enabled once a match has occurred that equals or exceeds a threshold value that has been set in accordance with the sensitivity of the data being requested access to. The system also enables varying levels of security within the same network since person A may be permitted access to certain data, and person B permitted access to other data. For example both are permitted access to general network data, but each is only permitted access to his/her own personal or employment or medical files.
The preferred embodiments of the data security system of the present invention requires authentication prior to each login; each request for data access; and each data entry. FIG. 6 discloses a simplified logic diagram of one embodiment for logging onto the data security system of the present invention. A captured print is compared to a reference record for purposes of authentication. Since the network may include data that is not confidential (like Internet access), the user need only be authorized to access the handheld computer to gain system access—this is not recommended for high security networks.
The preferred embodiments of the data security system of the present invention create a fingerprint-authenticated record of each user (data access and entry); of each record; and of each computer. FIGS. 7A and 7C together disclose a simplified logic diagram of one preferred embodiment for requesting access to the data security system of the present invention.
1. A handheld communications device for accessing and entering secure data into a secure network, said handheld communications device selected from the group consisting of a pen-based computer, a pocket computer, a palm-type computer, and a cell-phone, said handheld communications device including a fingerprint sensor for capturing user fingerprint data, said fingerprint sensor being embedded in a casing of said handheld communication device positioned at a fingerprint sensor site;
whereby placement of said fingerprint sensor site in said casing of said handheld communications device enables an incidental capture of a fingerprint image of a user for purposes of identity authentication by a remote host computer prior to each request to enter said secure data;
whereby placement of said fingerprint sensor site in said casing of said handheld communications device enables a continuous capture of a fingerprint or thumbprint while said handheld communications device is being used; and
whereby user identity authentication is provided either prior to or simultaneously with each request to enter each data stream into said secure network, providing assurance that any mobile worker seeking to enter data is authorized prior to each data entry.
2. The handheld communications device of claim 1, wherein said handheld communications device is a pen-based computer which includes a stylus, said fingerprint sensor site being disposed in a casing of said stylus.
3. The handheld communications device of claim 1, wherein said handheld communications device includes a processor, said fingerprint sensor site being disposed in a casing of said processor.
4. The handheld communications device of claim 1, wherein said fingerprint sensor captures user fingerprint data.
5. The handheld communications device of claim 1, wherein said fingerprint sensor captures user thumb print data.
6. The handheld communications device of claim 1, wherein entry of said secure data is enabled only if said user fingerprint data matches reference fingerprint data.
7. The handheld communications device of claim 1, wherein entry of said secure data is enabled only if another user biometric matches another reference user biometric.
8. A handheld communications device for accessing and entering secure data into a secure network, said handheld communications device selected from the group consisting of a pen-based computer, a pocket computer, a palm-type computer, and a cell-phone, the handheld communications device having a fingerprint sensor for capturing user fingerprint data, said fingerprint sensor being embedded in said handheld communication device positioned at a fingerprint sensor site;
whereby placement of said fingerprint sensor site in said handheld communications device enables an incidental capture of said user fingerprint data for purposes of identity authentication prior to each request to enter said secure data;
whereby placement of said fingerprint sensor site in said handheld communications device enables a continuous capture of fingerprint or thumbprint data while the handheld communications device is in use; and
whereby user identity authentication is enabled prior to each request to enter data into said secure network, providing capability to authenticate any mobile worker seeking to enter data prior to each data entry.
9. The handheld communications device of claim 8, wherein said handheld communications device is a pen-based computer which includes a stylus, said fingerprint sensor site being disposed in a casing of said stylus.
10. The handheld communications device of claim 8, wherein said handheld communications device includes a processor, said fingerprint sensor site being disposed in a casing of said processor.
11. The handheld communications device of claim 8, wherein said fingerprint sensor captures user fingerprint data.
12. The handheld communications device of claim 8, wherein said fingerprint sensor captures user thumb print data.
13. The handheld communications device of claim 8, wherein entry of said secure data is enabled only if said user fingerprint data matches reference fingerprint data.
14. The handheld communications device of claim 8, wherein entry of said secure data is enabled only if another user biometric matches another reference user biometric.
15. A handheld communications device for accessing and entering secure data into a secure network, said handheld communications device selected from the group consisting of a pen-based computer, a pocket computer, a palm-type computer, and a cell-phone, the handheld communications device having a fingerprint sensor for capturing user fingerprint data, said fingerprint sensor being embedded in said handheld communication device positioned at a fingerprint sensor site;
whereby placement of the fingerprint sensor site in the casing of said handheld communications device enables a continuous capture of fingerprint or thumbprint data while said handheld communications device is in use; and
whereby user identity authentication is enabled prior to each request to enter data in said secure network, providing capability to authenticate any mobile worker seeking to enter data prior to each data entry.
16. The handheld communications device of claim 15, wherein said handheld communications device is a pen-based computer which includes a stylus, said fingerprint sensor site being disposed in a casing of said stylus.
17. The handheld communications device of claim 15, wherein said handheld communications device includes a processor, said fingerprint sensor site being disposed in a casing of said processor.
18. The handheld communications device of claim 15, wherein said fingerprint sensor captures user fingerprint data or thumbprint data.
19. The handheld communications device of claim 15, wherein entry of said secure data is enabled only if said user fingerprint data matches reference fingerprint data.
20. The handheld communications device of claim 15, wherein entry of said secure data is enabled only if another user biometric matches another reference user biometric.
21. A handheld communications device for accessing and entering secure data into a secure network, said handheld communications device selected from the group consisting of a pen-based computer, a pocket computer, a palm-type computer, and a cell-phone, the handheld communications device having a fingerprint sensor for capturing user fingerprint data, said fingerprint sensor being embedded in said handheld communication device positioned at a fingerprint sensor site;
whereby placement of the fingerprint sensor site in said handheld communications device enables a continual capture of fingerprint or thumbprint data while said handheld communications device is in use; and
whereby user identity authentication is enabled prior to each request to enter data in said secure network, providing capability to authenticate any mobile worker who uses the handheld communication device seeking to enter data prior to each data entry.
22. The handheld communications device as claimed in claim 21 having a biometric sensor in addition to the fingerprint sensor,
the biometric sensor being positioned at a first sensor site in the handheld communications device, the biometric sensor capturing biometric data relative to a first biometric property, the placement of the biometric sensor site in the handheld communications device enabling continual capture of the first biometric property of the user while holding the handheld communications device.
US13/974,289 1999-09-17 2013-08-23 Data security system Active US9042608B2 (en)
US13/974,289 US9042608B2 (en) 2010-10-25 2013-08-23 Data security system
US20130336549A1 US20130336549A1 (en) 2013-12-19
US9042608B2 true US9042608B2 (en) 2015-05-26
ID=49759708
US13/974,289 Active US9042608B2 (en) 1999-09-17 2013-08-23 Data security system
US (1) US9042608B2 (en)
WO1997008090A1 (en) 1995-08-28 1997-03-06 Barth-Tex Instruments + Software Gmbh + Co. Tension device
WO1999007900A1 (en) 1997-08-12 1999-02-18 Fuisz Technologies Ltd. Mesomorphic sugar and products therefrom
WO2001021038A2 (en) 1999-09-24 2001-03-29 Omid Rahmanian Stress-free universal workstation module
WO2002016879A1 (en) 2000-08-22 2002-02-28 Robert Bosch Gmbh Method for a phase angle correction during scanning of a code track
SE0101618L (en) 2001-05-09 2002-11-10 Fingerprint Cards Ab Device for detecting fingerprint information
US7811121B2 (en) 2007-01-23 2010-10-12 Vestas Wind Systems A/S Flexible electric power cable and wind turbine
USD694142S1 (en) 2010-11-22 2013-11-26 Fingerprint Cards Ab Sensor for fingerprint detectors
2013-08-23 US US13/974,289 patent/US9042608B2/en active Active
US20130336549A1 (en) 2013-12-19
CN100414474C (en) 2008-08-27 Systems and methods for storage of user information and for verifying user identity