Machine security systems - Patent Review 5408536

Claims

I claim:

1. A security system for a machine comprising:

(a) an operating station including means for allowing a human operator to operate and control a machine from said operating station;

(b) means for attempting to identify a person seeking to operate the machine;

(c) means for automatically generating a control signal when the identification means confirms the identity of a person authorized to operate the machine;

(d) means for applying the control signal to the operating station to permit the authorized person to activate the operating station and act as operator of the machine from the operating station;

(e) means for detecting entry to and departure from a select area in the vicinity of the operating station by any person and for automatically generating a sisal upon said detection; and

(f) means coupled to the detection means and to the operating station for deactivating the operating station when the detection means has generated a signal, thereby indicating that the select area does not contain only the operator.

2. A system in accordance with claim 1 wherein the operating station comprises means for inputting and outputting information from a digital computer.

3. A system in accordance with claim 2 wherein the operating station includes a computer keyboard.

4. A system in accordance with claim 1 wherein the identification means includes a video analysis system including:

(a) means for sensing at least one physical characteristic of the person and automatically generating electronic codes related to said sensed characteristics;

(b) means for storing codes defining a plurality of sets of physical characteristics, each set relating to a person authorized to operate the machine; and

(c) means for comparing the codes derived from the sensing means with the stored codes representative of the characteristics of authorized persons.

5. A system in accordance with claim 4 wherein the video analysis system includes:

(a) a television camera positioned so as to scan the face of the person seeking to operate the machine;

(b) means for automatically controlling the television camera to effect a full-frame scan of the face of the person, and for generating a video signal containing information defining the image of the face of said person on an output of the camera;

(c) means for requesting identifying information be input by a human;

(d) means for recording said inputted identifying information and said video signal information output by the camera in an associated relationship;

(e) means for selectively reproducing video signal information and associated identifying information from the recording means;

(f) means for comparing said reproduced information with the information on the output of the camera; and

(g) means for logging said identifying information to maintain records of persons operating the machine.

6. The apparatus of claim 5 further comprising means for generating date and time codes and for logging said codes with said identifying information.

7. A system in accordance with claim 1 wherein the identification means includes a speech analysis system including:

(a) a microphone;

(b) means for converting speech spoken into the microphone into electrical speech signals;

(c) means for analyzing selected characteristics of the electrical speech signals;

(d) means for storing a plurality of signals, each representative of a person authorized to operate the machine; and

(e) means for comparing the analyzed characteristics with the stored signals.

8. A security system for a machine comprising:

(a) an operating station including means for allowing a human operator to operate and control a machine;

(b) means for attempting to identify a person seeking to operate the machine;

(c) means for automatically generating a control signal when the identification means confirms the identity of a person authorized to operate the machine;

(d) means for applying the control signal to permit the authorized person to activate the operating station and act as operator of the machine from the operating station;

(e) means for detecting departure of the operator from a predetermined area around the operating station and for automatically generating a signal upon said detection; and

(f) means coupled to the detection means and to the operating station for deactivating the operating station when the detection means has generated a signal, thereby indicating that the operator is no longer within said predetermined area.

9. A system in accordance with claim 8 wherein the operating station comprises means for inputting and outputting information from a digital computer.

10. A system in accordance with claim 9 wherein the operating station includes a computer keyboard.

11. A system in accordance with claim 8 further comprising means for requesting that identifying information be input by a human, and wherein the identification means includes:

(a) means for obtaining and recording at least one personal physical characteristic code;

(b) means for recording said inputted identifying information code and said personal physical characteristic in an associated relationship;

(c) means for selectively reproducing said personal physical characteristic code and associated identifying information code from the recording means; and

(d) means for comparing said reproduced information code with the information code on the output of said means for obtaining at least one personal physical characteristic code.

12. A system in accordance with claim 8 further comprising means for logging said identifying information code to maintain records of persons operating the machine.

13. A system in accordance with claim 8 wherein:

(a) said operating system includes a seat for the operator; and

(b) said detecting means comprises a switch that is operated when a person sits in the seat.

14. A system in accordance with claim 8 wherein said detecting means includes means for receiving radiation when a person is in said predetermined area.

15. A system in accordance with claim 8 wherein said detecting means includes an ultrasonic sensor operable to sense the physical presence of a person in said predetermined area.

16. A system in accordance with claim 8 including an AND logic circuit connected to said identifying means and said detecting means, said circuit operable to generate a control signal when a person is both identified as authorized and physically present at the operating station.

17. A security system in accordance with claim 8:

(a) further comprising means for requesting that an identification code be input by a human;

(b) wherein the identification means includes:

(i) means for obtaining personal characteristic information and automatically generating at least one personal physical characteristic code therefrom,

(ii) means for recording a personal identifying code and said personal physical characteristic code in an associated relationship,

(iii) means for selectively reproducing said personal physical characteristic code and associated identifying code from the recording means,

(iv) means for comparing said reproduced identifying code with the inputted identification code, and

(v) means for automatically comparing a personal physical characteristic code obtained from said person seeking to operate the machine with reproduced personal physical characteristic codes; and

(c) further comprising means for logging said identifying information code to maintain records of persons operating the machine.

18. A security system for a machine comprising:

(a) a terminal configured to allow a human operator to operate and exchange information with a machine;

(b) a personal-identification system configured to automatically generate on its output a first electronic control signal when a person authorized to operate the machine is situated adjacent to the terminal;

(c) a detector situated to generate on its output a second control signal when the person departs a select vicinity of the terminal; and

(d) a control circuit coupled to the terminal and the outputs of (b) and (c) and configured to apply the two control signals to permit the person to activate and act as operator of the terminal when the personal-identification system has issued the first control signal and the detector has not issued the second control signal.

19. A system in accordance with claim 18:

(a) further comprising a second detector situated to generate on its output a third control signal when another person besides the operator enters said select vicinity; and

(b) wherein aid control circuit is coupled to the output of the second detector and configured, upon receipt of the third control signal, to: (i) suspend operation of said terminal, (ii) then activate said personal-identification system to attempt to identify said another person as authorized, and (iii) then resume operation of said terminal only upon receipt of a first control signal associated with another person who is authorized to operate the machine.

20. A security system in accordance with claim 18:

(a) further comprising an input device configured to request that an identification code be input by a human;

(b) wherein the personal-identification system comprises:

(i) a sensor configured to generate signals representative of at least one personal physical characteristic of a person,

(ii) a recording member containing identifying codes and personal physical characteristic information in an associated relationship for at least one authorized person,

(iii) a transducer situated to selectively reproduce said personal physical characteristic information and associated identifying code from the recording member,

(iv) a first comparator that compares said reproduced identifying code with the inputted identification code, and

(v) a second comparator that compares said reproduced personal physical characteristic information with signals outputted by said sensor representative of personal physical characteristics of a person situated adjacent to the terminal,

wherein said personal-identification system generates said first electronic control signal when both of said comparators indicate a match; and

(c) further comprising means for logging said identifying information code to maintain records of persons operating the machine.

21. A system in accordance with claim 18 wherein said detector is coupled to re-activate said personal-identification system after a time.

22. A method of securing a machine comprising:

(a) attempting automatic identification of a person seeking to operate and control a machine from an operating station;

(b) generating a first electronic signal upon confirming the identity of a person who is authorized to operate the machine;

(c) applying the first signal to the operating station to permit the authorized person to activate the operating station and act as operator of the machine from the operating station;

(d) automatically detecting entry to and departure from a select area in the vicinity of the operating station by another person and generating a second electronic signal upon said detection; and

(e) applying the first and second signals to control the operating station to allow the operator to operate the operating station only when the first signal has been generated, but not the second, thereby indicating that the select area contains only the operator.

23. A method in accordance with claim 22 wherein the operating station comprises a terminal coupled to a digital computer.

24. The method in accordance with claim 22 further comprising logging information identifying said person upon generation of said first signal, thereby maintaining records of the identity of persons operating the machine.

25. A method in accordance with claim 22 wherein attempting automatic identification includes:

(a) sensing at least one physical characteristic of the person and automatically generating electronic codes related to said sensed characteristics;

(b) storing in an electronic memory codes defining a plurality of sets of physical characteristics, each set relating to a person authorized to operate the machine; and

(c) comparing the codes related to the sensed characteristics with the stored codes representative of the characteristics of authorized persons.

26. A method in accordance with claim 25 wherein attempting automatic identification further comprises:

(a) pre-recording identifying information for each authorized person in an associated relationship with said codes defining the set of personal physical characteristics related to that person;

(b) requesting that identifying information be input by each person seeking to activate the operating station;

(c) selectively reproducing said personal physical characteristic codes with said associated identifying information;

(d) comparing said reproduced identifying information with the inputted information; and

(e) confirming the identity of a person seeking to activate the operating station only if the inputted information matches the reproduced identifying information and the sensed physical characteristics match the stored codes related to the physical characteristics of a person who is authorized to activate the operating station.

SUMMARY OF THE INVENTION

This invention relates to a system and method for improving the operation of computers and computing systems, particularly with respect to the security and confidentiality of information contained and entered therein.

A number of major problems exist in the operation of computers and computing systems. One of such problems involves the unauthorized attainment of data from the computer or computing system. Another problem is involved with the entry of data into a computer or memory associated with a computing system, which data is either incorrect due to an operator's error or is false as a result of an attempt to commit fraud and falsify records.

The instant invention is concerned with a computer system in which fraud is substantially reduced or, if permitted, may be easily detected as to its source. The system also provides for means for assuring that confidential data stored therein is available only to persons authorized to view or receive same.

A primary feature of the instant invention involves the identification of all persons who enter data into a computer and preferably, although not necessarily, all persons who receive data from the computer or, in a specialized form, all persons who receive confidential data from the computer. Such identification may be effected in a number of ways, including the automatic electronic recognition of a particular feature of the person about to enter or receive data with respect to the computer or computer memory. Such recognition may be effected by (1) the electronic analysis of a person's voice signals generated when the person speaks into a microphone, (2) the automatic electro-optical scanning of a person's fingerprint presented by the person to a scanning location, (3) the automatic electro-optical or otherwise-effected scanning of the dimensions of a person's hand including the fingers thereof, (4) the electro-optical scanning of a person's face from one or more directions or the scanning of any other body feature of the person, wherein the analog signals derived from said scanning are digitized and are compared with signals derived from a memory that were originally recorded in such memory from signals derived in similar scans of the same person. Such identification results in the generation of a code signal, preferably from the computer memory, which is recorded in a temporary storage device such as on a magnetic disc or in an electronic memory, and the reproduction of such code signals from such storage device each time an entry is made by the operator into the computer or data is received from the computer or together with the information so recorded and/or a code signal or signals representative of the memory derived from the computer. The enabling signal or control, which permits data to be received or entered, may be periodically updated or refreshed in accordance with periodic checks of the identification of the person entering the data, which may be randomly or periodically indicated by a warning device requiring same or a sensing device that senses when such person leaves the vicinity of the terminal at which data is entered or requested.

In another form of the invention, data may be entered or requested by a person speaking words into a microphone at the computer terminal or remote therefrom and connected to the computer terminal by shortwave or telephone lines, wherein the voice signals of the person entering or requesting the data are automatically analyzed by the computer for identifying such person and generating an enabling signal as well as the identification code signal, which is recorded along with signals indicative of the information derived from and/or entered into the computer. Such automatic analysis may occur as the person speaks words indicative of information requested or to be answered.

In a particular form of the invention, two or more of the aforedescribed personal identification techniques may be employed and required for the entry or attainment of data or of specific data in the computer.

Accordingly, it is a primary object of this invention to provide a new and improved system and method for operating a computer or computing system.

Another object is to provide a system and method for operating a computer or computing system wherein identification of persons having access thereto and entering or receiving data with respect to the computer or its memory, is ascertained.

Another object is to provide a computer or computing system in which persons entering data into the system are identified and all transactions, including data entered and received, are identified and recorded as to the identification of the persons involved in such transactions.

Another object is to provide a computing system in which fraud in the entry of data is greatly reduced.

Another object is to provide a computer system in which confidential data stored in or retrieved from a computer, is only available to authorized persons.

Another object is to provide a computer system in which data is both entered and retrieved from the computer or its memory by the automatic analysis of speech signals generated by a person speaking into a microphone, which analysis results in identification of such person and the generation of a code that is applied as a recording to indicate the information derived from and entered into the computer, for record-keeping purposes.

Another object is to provide a computer security system in which the presence of a person is sensed at a terminal and the person is identified by sensing a physical characteristic of such person or by the person entering a code into the computer or auxiliary equipment wherein, if such person should leave the vicinity of the terminal, another person will not be able to operate the computer without further identification of such other person.

Another object is to provide a computer security system in which a record is made of the identity of all persons operating the computer and the information entered and received from the computer, whereby the source of data entered into the computer and retrieved therefrom may be identified for auditing purposes and control.

Another object is to provide a computer security system in which signals are recorded which positively identify persons who operate a computer or peripheral together with an indication of time of operation of the computer and information transferred.

With the above and such other objects in view as may hereinafter more fully appear, the invention consists of the novel constructions, combinations and arrangements of parts and method as will be more fully described and illustrated in the accompanying drawings, but it is to be understood that changes, variations and modifications may be resorted to, which fall within the scope of the invention as claimed.

BRIEF DESCRIPTION OF DRAWINGS

In the drawings:

FIG. 1 is a schematic diagram showing features of the broad computer security and control system defining the instant invention; and

FIG. 2 is a more detailed schematic diagram of the computer security system defining the instant invention.

DETAILED DESCRIPTION

FIG. 1 show broad aspects of a data processing system 10 that includes a data terminal 11A, and a computer 50. One or more of such terminals 11A may time share the computer 50 through interface 49 such as a time-sharing multiplexing system. The terminal 11A includes a coded keyboard 12 having an output 12A extending to a control gate or switch 14, which itself contains an output 14A extending to the interface or multiplexing device 49. The latter interface 49 contains one or more outputs 49A extending to the input or inputs of the computer 50, while the computer 50 contains one or more outputs 49B extending to the interface 49, which itself contains a plurality of outputs, one of which 14B extends to the gate 14, and an output 14C from such gate 14 extends to the input 13A of a memory or buffer 13B for an image writing display 13, which may comprise a conventional display cathode ray tube. Unless gate 14, which may contain one or more switches for enabling information to be transmitted from the coded keyboard 12 to the interface 49 and a computer 50 and from the computer 50 to the memory or buffer 13B for the cathode ray tube 13, is closed, such functions relating to the computer 50 as data input thereto, data retrieved therefrom and programming of the computer may not be performed.

In order to enable the operation of the computer 50 from the terminal 11A, an operator sitting at the coded keyboard 12 must properly activate one or more sensors, at least one of which is a sensor of a physical characteristic of the operator such as a microphone or other device. In FIG. 1, a microphone 15A is provided at the terminal, preferably although not necessarily, attached to the frame supporting the coded keyboard 12 and the cathode ray tube display 13 and at a location such that a person sitting at such keyboard may speak selected works into the microphone 15A so that analog audio signals will be generated on the output thereof, which extends to a computer or speech recognition processor 16 of conventional design.

The speech recognition processor-computer 16 is operable to process or digitize the analog speech signals generated on microphone output 15B and automatically analyze same by comparing the results with signals generated from a memory 19 in the processor. When the signals so analyzed match or otherwise compare with signals reproduced from the memory of the processor, which memory contains recordings or speech information from one or more persons authorized to operate the computer 50, a first signal is generated on one of a plurality of outputs 16A of the processor 16 and is applied to a particular circuit of a multiple input storage device 19 containing codes associated with different persons authorized to use the computer 50. Depending upon which of the outputs 16A of the processor 16 is activated, one of the codes stored in the storage device 19 is generated on its output 19A and is passed to the input 14D of the gate 14. When gate 14 is properly operated and closed, such code is passed to the computer 50 through the interface 49 and is recorded in the memory of the computer together with an indication of the time and date of such recording, as generated by either an internal clock associated with the computer circuits or an external clock connected to the computer. An indication of the information transmitted to the computer 50 from the coded keyboard 12 and received from the computer and displayed on the display screen of a cathode ray tube 13, is recorded in a special section of the memory of the computer 50 or an auxiliary memory located within or external of the computer so that an identification of the person operating the computer, the information such person enters into the computer and the information received from the computer as well as the date and time of day such information is generated or received, is had for future reference.

Gate 14 is normally open and thereby prevents the transmission of information to or from computer 50 with respect to terminal 11a. Gate 14A will close to pass information in both directions when the speech recognition processor-computer 1