Method and apparatus for personal verification utilizing nonpredictable codes and biocharacteristics

Description Submit all comments and votes

FIELD OF THE INVENTION

This invention relates to methods and apparatus for verifying the identity of an individual and, more particularly, to methods and apparatus for utilizing both nonpredictable codes and a biocharacteristic of the individual whose identity is to be verified to provide enhanced verification security.

BACKGROUND OF THE INVENTION

Personal identification systems may be based on something someone has, such as a card or badge, something that someone knows, such as a personal identification number (PIN), or a biocharacteristic of the individual such as voice pattern or the like. Each of these bases alone can be defeated and thus does not provide a high level of personal verification security. For example, a card alone can be lost or stolen, a PIN can be overheard, can be surreptitiously intercepted and learned when being transmitted over a communication line, or can otherwise be compromised. Most biocharacteristics can be sampled surreptitiously and then computer synthesized or otherwise reproduced.

Heretofore, efforts have been made to enhance the security of personal verification systems by utilizing two of the bases in a single system. While this does result in enhanced security, the security is still not as high as would be desired for some applications. Ideally, all three bases would be used in a single verification system. However, the storage requirements for voice recognition or other biocharacteristic recognition systems are prohibitively high or a large number of inputs must be recognized if the system is adapted to recognize a reasonable number of individuals. If the system only needs to recognize the individual s saying a predetermined code sequence such as his PIN, the message is subject to surreptitious interception and simulation. Thus, even very expensive systems enjoy only limited success in providing a high level of verification security.

A need therefore exists for a relatively simple, inexpensive method and apparatus to provide highly secure personal identification, achieving this objective by utilizing all three bases in a synergistic way in performing the verification function.

SUMMARY OF THE SYNERGISTIC INVENTION

In accordance with the above, this invention provides a method and apparatus for verifying the identity of an individual wherein a user device is provided which generates a time varying, multi-character, nonpredictable code. The individual communicates the nonpredictable code generated at a given time to a verification device in a manner such that a biocharacteristic of the user is communicated with each code character. For example, the characters may be orally communicated over a voice channel such as a telephone line with a biocharacteristic being the voice pattern of the individual or the biocharacteristic may be the unique stroke pattern sequence which the individual uses in writing the characters, the characters appearing at the user device being communicated by being inputted through a stroke pattern recognition device such as a pressure-sensitive device. The verification device is adapted to generate the same nonpredictable code as is appearing at the user device at the given time, and for converting each character of the generated nonpredictable code to an indication of the character which includes the biocharacteristic. For example, an indication of the voice pattern of the individual for each character which may appear in the nonpredictable code may be stored and the voice pattern indication for the character read out in response to the character being generated. The communicated biocharacteristic indications from the individual are then compared with the indications obtained from the conversion, verification being signified if these indications match in a predetermined way.

The foregoing and other objects, features and advantages of the invention will be apparent from the following more particular description of preferred embodiments as illustrated in the accompanying drawings.

IN THE DRAWINGS

FIG. 1 is a block diagram of a basic apparatus and method according to the invention for generating and comparing nonpredictable codes;

FIG. 1A is a block diagram of a preferred apparatus and method for generating and comparing nonpredictable codes where a means for comparing nonpredictable codes is included in a calculator which generates a nonpredictable code;

FIG. 2 is a front isometric view of a credit card sized calculator for calculating a first nonpredictable code for use in gaining clearance or access according to the invention;

FIG. 3A-3B together form a flow chart demonstrating a most preferred series of steps carried out by an apparatus according to the invention and/or in a method according to the invention;

FIGS. 4-9 are diagrammatic representations of series of resultant code cells separately generated by separate computers according to exemplary situations described herein; each diagram sets forth the relationship vis a vis real time between resultant codes generated on the basis of time as kept by separate clock mechanisms in the separate computers generating the resultant codes according to the corresponding conditions described with reference to each figure;

FIG. 10 is a semi-block schematic diagram of a first preferred embodiment of the invention; and,

FIG. 11 is a semi-block schematic diagram of a portion of the verification device for a second embodiment of the invention.

DETAILED DESCRIPTION OF THE SYNERGISTIC INVENTION

Referring to FIG. 10, the system includes a user device 512 which is preferably a credit-card sized device of the type described in detail in the parent application and patent previously mentioned. For purposes of ease of reference and completeness the specification of parent application Ser. No. 802,579 is set forth hereinbelow. Briefly, this device inputs a time varying value, for example, a clock value which varies every minute, and a fixed value, for example, a secret code word, into a processing device which operates on the two inputs in accordance with a secret algorithm to generate a multi character nonpredictable code which is preferably displayed on a multi character display element 514. Element 514 may, for example, be a standard liquid crystal or light-emitting diode display which is adapted to display the ten numeric characters 0-9. The display may also be adapted to display alphanumeric characters. While five character positions have been shown for the display 514 in FIG. 10, it is to be understood that this display may have any number of character positions depending on the degree of security required. Typically, this display might, for example, have eight characters.

The individual who is seeking to have his identity verified communicates information for accomplishing verification to a verification device or station 516 through standard telephones 518, telephone line 520 and modem 522.

In practice, the user will initially input his PIN or other identifying code on telephone 518A. While this may be done orally, it is preferably done by striking appropriate keys on the telephone to provide a digital indication. This input is applied to a PIN recognition circuit 522 in verification device 516. Circuit 522 may include a modem for converting the signals received over telephone line 520 into digital signals to operate device 516. When PIN recognition circuit 522 detects that a PIN is being received, it generates an output on line 524 which inhibits gate 526.

The PIN output from circuit 522 is applied as an addressing input to nonpredictable code generator 528 and to characterize voice pattern store 530. Nonpredictable code generator 528 operates in a manner described in detail in the beforementioned parent application and patent to generate a nonpredictable code at a given time which is the same as the nonpredictable code appearing on display 514 at that given point in time. This is accomplished by using the PIN input to access the secret code word stored in device 512 and an indication of the clock input at device 512, and to operate on such inputs utilizing the same algorithm as is used at the device 512. Parent application Ser. No. 802,579 set forth hereinbelow discloses various ways in which the clocks at the two devices 512 and 516 may be maintained in synchronism.

Character voice pattern store 530 stores a predetermined number of samples from the voice pattern of each individual using the system speaking each character which may appear on display 514. Thus, if only numeric characters 0-9 may appear on display 514, the voice patterns for each of these characters would be stored for each individual whose identity this system is to verify. In order to avoid storing huge amounts of