Classifications

• • G—PHYSICS
  • G07—CHECKING-DEVICES
  • G07F—COIN-FREED OR LIKE APPARATUS
  • G07F7/00—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
  • G07F7/08—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
  • G07F7/10—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means together with a coded signal, e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
  • G07F7/1008—Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
  • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
  • G06Q20/00—Payment architectures, schemes or protocols
  • G06Q20/04—Payment circuits
• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
  • G06Q20/00—Payment architectures, schemes or protocols
  • G06Q20/08—Payment architectures
  • G06Q20/10—Payment architectures specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
  • G06Q20/00—Payment architectures, schemes or protocols
  • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
  • G06Q20/32—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices
  • G06Q20/327—Short range or proximity payments by means of M-devices
• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
  • G06Q20/00—Payment architectures, schemes or protocols
  • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
  • G06Q20/34—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using cards, e.g. integrated circuit [IC] cards or magnetic cards
  • G06Q20/341—Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
  • G06Q20/00—Payment architectures, schemes or protocols
  • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
  • G06Q20/34—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using cards, e.g. integrated circuit [IC] cards or magnetic cards
  • G06Q20/357—Cards having a plurality of specified features
  • G06Q20/3576—Multiple memory zones on card

Definitions

• the present invention relates to a wireless portable communications system; and, more particularly, to a wireless portable device capable of performing such various functions as purchasing goods, payment, banking transaction or the like with an improved security.
• wireless portable or mobile terminals such as cellular telephones have been widely used and it has also become possible to accomplish a data transmission as well as a voice signal transmission therethrough.
• the use of the wireless portable terminals are gradually being extended to various applications in the art such as an internet, banking transactions and the like.
• machine-readable identification cards such as credit cards, debit cards, point of sale
• POS teller machine
• ATM ATM cards, pass cards and the like, have become prevalent in such applications as performing credit sales transactions, payment of fees and gaining access to a restricted area.
• unattended banking terminals such as ATMs permit certain transactions. These transactions include accepting deposits, dispensing cash, transferring funds from one account to another, and making payments on credit card, utility or other accounts, or on mortgage or installment loans and the like.
• the customer is required to present an identification card, which is often formed of a plastic medium and contains machine- readable information therein. This information includes, but is not limited to, the customer's account number, the identification number of the bank or institution, expiration date, credit limit, account balance and types of transactions authorized.
• the information is preferably contained in the card in the form of invisible magnetically recorded indicia, or could be contained in embossed indicia, apertures, or electrically conducting segments.
• the customer can perform those banking transactions with a telephone, a computer system, or the like without using any card.
• the customer has to input identification information of the customer through, e.g., the telephone, in order to initiate authorized banking transactions .
• secret data such as a password or an identification number
• account number and other transaction information are transmitted to a host or central banking computer over a communication line.
• secret data such as a password or an identification number
• one object of the present invention to provide a multi-functional portable device for performing various functions in conjunction with more than one different host systems so as to take advantage of the convenience of portable devices and improve its transaction security.
• Another object of the present invention is to provide a transceiver, incorporated with a host system, for effectively enabling a function to be carried out between the host system and the multi-functional portable device.
• Still another object of the present invention is to provide a wireless communication system including a multi-functional portable device and more than one host systems each of which has a transceiver and a host apparatus in order to accomplish various functions therethrough and enhance its transaction security.
• a multi-functional portable device for performing various functions in conjunction with more than one different host systems, the portable device performing at least one specific function with a host system and communication between the portable device and the host system being carried out by wireless signals, comprising: a storage unit for storing at least a portion of information required in performing said at least one specific function; and a transceiver unit for transmitting the information to the host system in a form of an encrypted signal.
• a transceiver incorporated with a host apparatus, for enabling a function to be carried out between the host apparatus and a multi-functional portable terminal, the portable terminal transmitting an encrypted signal representing information required in performing the function, comprising: a control unit for decrypting the encrypted signal to reconstruct the information; and a data interfacing unit for providing the reconstructed information to the host apparatus.
• a wireless communication system including a multi-functional portable device and more than one host systems, wherein the portable device performs various functions in conjunction with the host systems, the portable device performing at least one specific function with a host system and the host system having a transceiver and a host apparatus, the portable device comprising: a storage unit for storing at least a portion of information required in performing said at least one specific function; and a transceiver unit for transmitting the information to the host system in a form of an encrypted signal, and the transceiver comprising: a control unit for decrypting the encrypted signal to reconstruct the information; and a data interfacing unit for providing the reconstructed information to the host apparatus.
• Fig. 1 illustrates a schematic block diagram of a wireless communications system in accordance with the present invention
• Fig. 2 shows a first embodiment of the present invention
• Fig. 3 depicts a second embodiment of the present invention
• Fig. 4 describes a third embodiment of the present invention
• Fig. 5 provides a fourth embodiment of the present invention
• Fig. 6 represents a fifth embodiment of the present invention.
• Fig. 7 shows a sixth embodiment of the present invention.
• Fig. 8 presents a seventh embodiment of the present invention.
• the system comprises a portable terminal 100, a transceiver 200 and a host apparatus 300.
• the host apparatus 300 can be an automatic engine starter, an actuator, an ATM, a host banking computer, a transport card terminal, a vending machine, a value-added network (VAN) terminal or the like, which will be illustrated hereinbelow.
• VAN value-added network
• the portable terminal 100 includes an antenna 101, a fingerprint scanning unit 110, a data entry unit 120, a display unit 130, an interfacing unit 140, a control unit 150, a storage unit 160, a direct or local communication transceiver unit 170, a base station communication transceiver unit 180 and a power supply unit 190.
• the fingerprint scanning unit 110 scans a fingerprint of a user and converts the scanned fingerprint image to electrical signals.
• the user can input data required in performing a selected function at the portable terminal 100.
• the display unit 130 shows message data representing the processing status and information required to be reported to the user during the performance of the selected function.
• the interfacing unit 140 connected between the control unit 150 and the fingerprint scanning, data entry and display units 110, 120 and 130, transmits signals or data, required in performing the selected function, between the units connected thereto, e.g., units 110, 120, 130 and 150.
• the control unit 150 generally controls the operations of other components of the portable terminal 100. Specifically, if fingerprint data in the form of electrical signals are provided thereto via the interfacing unit 140 from the fingerprint scanning unit 110, the control unit 150 compares the fingerprint data with registered fingerprint data stored in the storage unit 160 to verify whether or not the user is an authorized user. If the user is verified as a result of the comparison, the control unit 150 encodes or encrypts transaction information to output the encrypted information to the local communication transceiver unit 170 or the base station communication transceiver unit 180 depending on applications, as will be described with reference to Figs. 2 to 8.
• the transaction information may include transaction data representing the contents of the transaction to be carried out, personal identification data which includes, but is not limited to, a card number, an account number, a name of the user, password or a combination thereof, the fingerprint data, current time data or a combination thereof according to a function to be performed.
• personal identification data which includes, but is not limited to, a card number, an account number, a name of the user, password or a combination thereof, the fingerprint data, current time data or a combination thereof according to a function to be performed.
• the transaction information includes one of the fingerprint data of the user and the registered fingerprint data.
• the transaction information contains the registered fingerprint data stored in the storage unit 160.
• numeral signals corresponding to the operated key pads or preset data corresponding to the operated key pads may be also encrypted and included in the above transaction information.
• the current time data represent year, month, hour, minute and second.
• the current time is set by receiving time synchronous data provided by a base station.
• the current times of the base stations are synchronized under the control of a satellite .
• the fingerprint data can be representative feature data of the fingerprint of the user in order to reduce the volume of the data.
• the storage unit 160 stores, but not limited to, the registered fingerprint data, basic personal identification data which may include, but are not limited to, e.g., a card number, an account number, password or the like needed for performing each function, a cryptographic algorithm, various communication programs and so on, and can be of a nonvolatile memory, e.g., a flash memory, or preferably of a volatile memory having a power retention capability.
• the volatile memory is preferably associated with a subsidiary power storage device capable of maintaining the stored data in the storage unit 160 for a prolonged period when the power supply unit 190 is discharged or unloaded.
• the volatile memory is further provided with an associated device for erasing the data or information stored therein against the attempts of dissembling the portable terminal 100 or breaking into the memory system to take out the stored data, thereby preventing the stored data from being revealed to an unauthorized user when the portable terminal 100 is lost or stolen.
• control unit 150 selects either the direct or local communication transceiver unit 170 or the base station communication transceiver unit 180 according to a function chosen among the functions that can be accomplished through a local area communication or a long-distance communication.
• the direct or local communication transceiver unit 170 modulates the encrypted information delivered from the control unit 150 to, e.g., radio frequency (RF) signals and transmits the modulated signals via the antenna 101 to the transceiver 200. Furthermore, optionally, during the performance of the selected function, the direct communication transceiver unit 170 may receive signals from the transceiver 200 and demodulate the received signals so as to provide the demodulated signals to the control unit 150.
• RF radio frequency
• the base station communication transceiver unit 180 converts the encrypted information transferred from the control unit 150 to, e.g., CDMA signals; modulates the converted signals into, e.g., RF signals; and transmits the modulated signals via the antenna 101 to a base station (not shown).
• the base station communication transceiver unit 180 may receive signals from the transceiver 200 via the base station and demodulate the received signals to thereby provide the demodulated signals to the control unit 150.
• the control unit 150 can choose either the direct or local communication transceiver unit 170 or the base station communication transceiver unit 180 according to the characteristic of the selected function to be performed by the portable terminal 100. That is, if the selected function is adapted to the local area communication, the direct or local communication transceiver unit 170 is chosen and, if otherwise, the base station communication transceiver unit 180 is selected.
• the power supply unit 190 provides a DC voltage to each component of the portable terminal 100 and is preferably a rechargeable battery.
• the transceiver 200 comprises an antenna 201, a transceiver unit 210, a control unit 220, a storage unit 230, a signal input/output (I/O) unit 240 and a data interfacing unit 250.
• the transceiver unit 210 receives the transmission signals delivered from the direct communication transceiver unit 170 or the base station communication transceiver unit 180 of the portable terminal 100 via the communication channel; demodulates the received signals; and transfers the demodulated signals to the control unit 220.
• the transceiver unit 210 can modulate signals or information provided from the control unit 220 and transmit the modulated signals or information via the antenna 201 to the portable terminal 100.
• the control unit 220 decrypts the demodulated signals provided from the transceiver unit 210 by using a cryptographic algorithm stored in the storage unit 230 to thereby provide control or display signals corresponding to the decrypted signals to a host apparatus 300 via the signal I/O unit 240 while outputting functional data derived from the demodulated signals to the host apparatus 300 via the data interfacing unit 250.
• a time gate scheme is employed to enhance the security.
• the control unit 220 compares the time data included in the decrypted signals with a time data representing the current time in the transceiver 200. As a result of the comparison, only if the time difference determined by the time data transmitted from the portable terminal 100 and that of the transceiver 200 is within a predetermined range, e.g., a data propagation time from the transceiver unit 170 or 180 to the control unit 220, the transmitted data from the portable terminal 100 is determined as the valid data. In other words, only if the difference is equal to or smaller than a predetermined threshold value, the control or display signals, or the functional data is transferred to the host apparatus 300 via the signal I/O unit 240 or the data interfacing unit 250.
• verification of data in accordance with the inventive time gate scheme is performed by the host apparatus 300 in lieu of the transceiver 200.
• the decrypted signals are transferred to the host apparatus 300 without being subject to the verification of data, which is then carried out at the host apparatus 300.
• the current times of the portable terminal 100 and the transceiver 200 (or the host apparatus 300) are periodically synchronized and, therefore, are set to be identical all the time. Further, the current time at an instance when the portable terminal 100 encodes or encrypts the transaction information is included therein and then compared with the current time at an instance when the transceiver 200 or the host apparatus 300 receives the transaction information.
• the inventive time gate scheme can provide enhanced security but is simple and easy to implement because time synchronization of the system can be achieved by existing communication networks, e.g., CDMA PCS (personal communications services) networks, without having to employ additional complicated time synchronization schemes as in the prior art and time data itself is directly compared with the current time of the receiving end without using rather complex time- based codes.
• CDMA PCS personal communications services
• the current time at the portable terminal 100 and the current time at the transceiver 200 (or the host apparatus 300) can be synchronized by time synchronization data provided by base stations or a satellite in, e.g., existing CDMA communication networks. Therefore, as can be seen above, the inventive time gate scheme can be employed in the preferred embodiments if desired by way of incorporating a device into either the transceiver 200 or the host apparatus 300 capable of receiving the time synchronization data.
• a user Prior to all of operations, a user first sets the portable terminal 100 to a fingerprint registration mode by manipulating the data entry unit 120 and registers his/her fingerprint data, produced by scanning the user's fingerprint through the use of the fingerprint scanning unit 110, in the storage unit 160 to accomplish the fingerprint registration process.
• the fingerprint data are encrypted and then stored in order to avoid being revealed to unauthorized users when the portable terminal 100 is lost or stolen.
• Some of the functions which can be provided by the portable terminal 100 may not need the fingerprint authentication depending on the levels of security they require, as will be described with reference to the embodiments of Figs. 2 to 8. For instance, if a transaction or a function does not involve a large amount of money and the security level required is not critical, the fingerprint authentication process can be omitted for the sake of convenience. For the purpose of illustration, however, it is assumed that the fingerprint authentication process is required and the process is generally described hereinbelow. After completing the fingerprint registration process, if a user places a finger on the fingerprint scanning unit 110 by which a fingerprint of the finger is scanned, fingerprint feature data corresponding to the user's finger are generated and then provided to the control unit 150 via the interfacing unit 140.
• control unit 150 Upon receiving the fingerprint data provided thereto, the control unit 150 compares the fingerprint data with the registered fingerprint data previously stored in the storage unit 160 so as to determine whether the user is an authorized user or not.
• the control unit 150 terminates the fingerprint authentication process and instructs the display unit 130 to display thereon a message representing the failure of the fingerprint authentication.
• the control unit 150 encrypts transaction information including the fingerprint data, the current time data of the portable terminal 100, the transaction data representing the content of a function to be carried out and required in performing the function, the personal identification data which may include a card number, an account number, password or the like required in performing the function, or a combination thereof by using the cryptographic algorithm stored in the storage unit 160.
• the control unit 150 then outputs the encrypted information to the direct or local communication transceiver unit 170 or the base station communication transceiver unit 180 while displaying a message showing that the function or the transaction is under process on the display unit 130.
• the personal identification data for each function are all prestored in the storage unit 160 and, therefore, need not be inputted by the user on a function basis.
• the transaction data may also be generated automatically without requiring a user's input. In some applications, however, at least some of the transaction data may need to be inputted by the user. For instance, if a function being performed is of a tele- banking, the user may have to make a selection among services provided or have to input a transaction account. In such a case, the control unit 150 prompts the user to input data by delivering the requisite message on the display unit 130.
• information corresponding to the input data is also encrypted and included in the transaction information by the control unit 150; and the encrypted information is provided to the direct or local communication transceiver unit 170 or the base station communication transceiver unit 180.
• the function or the transaction is terminated.
• the processing order of the above operations can be changed in accordance with the embodiments of the present invention. That is, the data entry operation can be performed prior to the fingerprint authentication.
• data transmission between the portable terminal 100 and the transceiver 200 may be carried out by the infrared ray signals.
• the antenna 101 would be to be of the type implemented by a photo diode and a photo detector.
• the transceiver unit 210 receives the modulated signals transmitted through the communication channel from the portable terminal 100; demodulates the received signals; and transfers the demodulated signals to the control unit 220.
• the antenna 201 is also of the type implemented by a photo diode and a photo detector.
• the control unit 220 decrypts the demodulated signals provided from the transceiver unit 210 through the use of the cryptographic algorithm stored in the storage unit 230; constructs the original information corresponding to the encrypted information outputted from the portable terminal 100 based on the decrypted signals; and provides the reproduced information to the host apparatus 300 via the signal I/O unit 240 or the data interfacing unit 250 according to the characteristics of the reproduced information.
• the inventive time gate scheme and/or the fingerprint authentication process can be performed at the transceiver 200 prior to delivering the reproduced information to the host apparatus 300.
• the time gate scheme is accomplished as described above in detail and the fingerprint authentication process is carried out by the control unit 220 in the same manner as in the portable terminal 100 based on the fingerprint data included in the reproduced information and the fingerprint data prestored in the storage unit 230.
• registration of the fingerprint data in the storage unit 230 can be accomplished by using an external fingerprint scanning apparatus which can be connected to the transceiver 200.
• FIG. 2 there are illustrated exemplary embodiments of the present invention, which will be explained in conjunction with Fig. 1.
• FIG. 2 there is illustrated a first exemplary embodiment of the present invention applied in remote- starting of an automobile.
• the inventive transceiver 200 is connected to an automatic engine starter 400.
• the automatic engine starter 400 can be of a kind being used in conventional remote-controlled vehicle engine starting systems.
• the portable terminal 100 acts as a remote control transmitter for providing an engine start signal; the transceiver 200, a receiver for capturing and feeding the transmitted engine start signal to the automatic engine starter 400; and the automatic engine starter 400, an engine starting circuit for starting the engine in response to the transmitted engine start signal.
• the automatic vehicle starting function is selected, e.g., by inputting a corresponding code via the data entry unit 120 so that the portable terminal 100 is initiated to perform the selected vehicle starting function
• fingerprint data of a user of the portable terminal 100 are provided through the fingerprint scanning unit 110 and provided to the control unit 150 via the interfacing unit 140.
• the control unit 150 retrieves from the storage unit 160 and encrypts a vehicle starting signal containing the fingerprint data.
• the encrypted signal is modulated at the direct communication transceiver unit 170 and then transmitted to the transceiver 200 through the communication channel, i.e., the air.
• This embodiment assigns about 300 bytes to the transmission of the vehicle starting signal.
• the control unit 220 compares the fingerprint data detected from the received signal with registered fingerprint data stored in the storage unit 230. If the result of the comparison is positive, i.e., the fingerprint authentication is accomplished, a control signal is provided to the automatic engine starter 400. Then, the automatic engine starter 400 automatically starts the engine of the vehicle in response to the control signal. Also, the automatic engine starter 400 may include appropriate circuits for automatically operating various accessory electrical equipment in the vehicle such as the headlights, heater, air conditioner, defroster, etc. Since the operation of the automatic engine starter 400 is similar to that of an engine starting circuit of a conventional remote- controlled vehicle engine starting system, the explanation thereof will not be repeated for the sake of simplicity.
• the fingerprint data need be prestored in the storage unit 230. In that case, registration of the fingerprint data can be accomplished prior to installing the transceiver 200 in the automobile by using an external fingerprint scanning apparatus which can be connected to the transceiver 200.
• the security level required in this embodiment may not be so critical, and, therefore, the time gate scheme of the invention may not be employed in this embodiment.
• the time gate scheme can be employed in this embodiment if desired by way of incorporating a device into the transceiver 200 capable of receiving the time synchronization data from a base station.
• the fingerprint authentication process may be performed only at the portable terminal 100.
• the storage unit 230 does not need store the registered fingerprint data therein and fingerprint data need not be included in the vehicle starting signal transmitted from the portable terminal 100.
• Fig. 3 there is illustrated a second exemplary embodiment of the present invention applied in a remote-controlled door lock system which remotely unlocks or locks an automatic door.
• the transceiver 200 is connected to an actuator 500.
• the actuator 500 can be also of a kind being used in conventional remote-controlled door lock systems.
• the portable terminal 100 simply acts as a remote control transmitter for providing a door lock control signal; the transceiver 200, a receiver for capturing and feeding the transmitted door lock control signal to the actuator 500; and the actuator 500, a door lock circuit for locking or unlocking the automatic door in response to the transmitted door lock control signal.
• the operation of the present invention related to the remote-controlled door lock system is similar to that of the first embodiment. That is, if the remote- controlled door lock function is selected, e.g., by inputting a corresponding code via the data entry unit 120, the portable terminal 100 is initiated to perform the selected door lock function. Thereafter, a door lock control signal containing fingerprint data of a user are transferred to the transceiver 200 through the communication channel, i.e., the air, only if the fingerprint authentication is successfully accomplished.
• the control unit 220 detects the fingerprint data of the user from the received door lock control signal and compares them with registered fingerprint data prestored in the storage unit 230. If the result of the comparison is positive, i.e., the fingerprint authentication is accomplished, a control signal is provided to the actuator 500. Then, the actuator 500 automatically locks or unlocks the automatic door in response to the control signal.
• the fingerprint authentication at the transceiver 200 may not be employed as in the first exemplary embodiment.
• the time gate scheme may be or may not be employed as in the first exemplary embodiment .
• a third exemplary embodiment of the present invention applied in ATM systems, wherein the portable terminal 100 performs an ATM card function and is used in lieu of a machine-readable identification card such as a credit card or an ATM card.
• the transceiver 200 is connected to an ATM 600 and a predetermined portion of the storage unit 160 is assigned to store data or information, such as a card number, password, etc., required to perform the ATM card function.
• the portable terminal 100 if the ATM card function is selected, e.g., by inputting a corresponding code via the data entry unit 120, the portable terminal 100 is initiated to perform the selected ATM card function. Then, upon the successful fingerprint authentication, the portable terminal 100 transmits transaction information through the direct communication transceiver unit 170 to the transceiver 200 connected to or embodied in the ATM 600, wherein the transaction information includes, but is not limited to, a corresponding card number and password, which are stored in the storage unit 160.
• the control unit 220 decrypts the transmitted transaction information and, then, the decrypted transaction information is transferred to the ATM 600 without being subject to the verification of data, which is carried out at the ATM 600 based on the decrypted transaction information as in the prior art. If the access to the ATM 600 is permitted through the data verification at the ATM 600, the user can accomplish the desired banking transactions by operating the ATM 600 in the same manner as in the prior art using the machine-readable identification cards.
• the transactional operations at the ATM 600 is not germane to the subject invention and, therefore, the details thereof will not be described for the sake of simplicity.
• the fingerprint authentication is employed.
• the portable terminal 100 provides the transceiver 200 with transaction information which further includes the fingerprint data of the verified user.
• the control unit 220 decrypts the transmitted transaction information including the fingerprint data and provides the decrypted transaction information via the ATM 600 to a host banking computer (not shown) connected to the ATM 600.
• the host banking computer carries out the verification of the transaction information by further comparing the fingerprint data included in the transaction information with registered fingerprint data recorded in authorized user files in the host banking computer through the fingerprint authentication process depicted above. As a result, if the user is verified as an authorized user, the desired banking transactions are performed in the same manner as in the prior art.
• the present invention can employ the time gate scheme for enhancing the security of the banking transactions instead of or together with the fingerprint authentication.
• the time gate scheme may be performed by way of the transceiver 200, the ATM 600 and the host banking computer if they are provided with devices for capturing the time synchronization data so that the time thereat is synchronized with that at the portable terminal 100.
• the time comparison is carried out at the host banking computer.
• a fourth exemplary embodiment of the present invention applied to a phone banking.
• the transceiver 200 is connected to or embodied in a host banking computer 700 and a predetermined portion of the storage unit 160 of the portable terminal 100 is assigned to store data or information required to perform the phone banking.
• this embodiment utilizes the time gate scheme described above together with the fingerprint authentication to improve its security.
• a user chooses the phone banking function to thereby set up the call connection to the host banking computer 700 and initiate the phone banking function by way of, e.g., inputting a corresponding code number or calling the host banking computer 700 and the portable terminal 100 determinates the user to be an authorized one as a result of the fingerprint authentication process
• transaction information including, but not limited to, the personal identification data having a user's identification number, an account number, password, etc., the user's fingerprint data and the time data representing a current time at the portable terminal 100, are encrypted and modulated at the portable terminal 100.
• the modulated signals are then transmitted via a base station 750 to the transceiver 200 connected, e.g., between a host banking computer 700 and the base station 750.
• the control unit 220 demodulates and decrypts the received signals to restore the original transaction information and transfers the decrypted transaction information to the host banking computer 700. If the decrypted transaction information is coupled thereto, the host banking computer 700 performs the data verification, the fingerprint authentication and the time gate processes as described in the third embodiment .
• a fifth exemplary embodiment of the present invention incorporating transport, e.g., bus and/or subway, card functions in the portable terminal 100, which can be used to pay transport fares instead of conventional transport cards.
• transport e.g., bus and/or subway
• a predetermined portion of the storage unit 160 is assigned to store data or information required to perform the transport card functions and the data transmission of the portable terminal 100 is accomplished via the direct communicating transceiver unit 170 since the portable terminal 100 for this embodiment is operable only when it is placed close to a transport card terminal 800.
• the portable terminal 100 when the portable terminal 100 is placed within a predetermined distance from the transport card terminal 800, the portable terminal 100 is automatically initiated to perform the transport card function, e.g., by receiving an establishing signal which is continuously broadcasted from the transceiver 200.
• the portable terminal 100 is used instead of a bus card which is of a prepaid card, a prepaid amount of money is recorded in a predetermined portion of the storage unit 160 in the portable terminal 100.
• the portable terminal 100 is automatically set to perform the bus card function and a bus fare is transferred together with portable terminal information from the portable terminal 100 to the transport card terminal 800 via the direct communicating transceiver unit 170 and the transceiver 200.
• the prepaid amount of money is then updated by deducting the bus fare therefrom.
• the portable terminal 100 contains a subway card function therein, the portable terminal 100 is automatically set to perform the subway card function by receiving the establishing signal broadcasted from the transceiver 200 when the portable terminal 100 is placed within the predetermined distance from the transport card terminal 800. And then, since the subway card function is generally combined to a credit card, credit card information previously stored in a predetermined portion of the storage unit 160 of the portable terminal 100 is extracted and transmitted to the transceiver 200.
• the transceiver 200 decrypts the encrypted credit card information and provides the decrypted information to the transport card terminal 800 through the data interfacing unit 250. Then, the transport card terminal 800 performs the remaining processes to accomplish the subway card function as in the prior art .
• the transport card function can be performed after authenticating fingerprint data of a user at the portable terminal 100. That is, before transmitting the portable terminal information or the credit card information, the fingerprint data of the user are inputted to the portable terminal 100 through the fingerprint scanning unit 110 and the portable terminal 100 performs the fingerprint authentication by comparing the inputted fingerprint data with the registered fingerprint data stored in the storage unit 160. After the fingerprint authentication is successfully accomplished, the required information, i.e., the portable terminal information or the credit card information, can be transmitted from the portable terminal 100 to the transport card terminal 800.
• FIG. 7 there is illustrated a sixth exemplary embodiment of the present invention incorporating a prepaid card, a debit card or a credit card function, an electronic money or a combination thereof in the portable terminal 100 to purchase a desired product from a vending machine 900.
• a predetermined portion of the storage unit 160 is assigned to store data or information required to implement this embodiment .
• a user inputs a preset amount of money to be needed to use the vending machine 900 by using the data entry unit 120 and chooses a payment method among the various card function and the electronic money.
• the control unit 150 encrypts and modulates the preset amount of money together with payment information corresponding to the chosen payment method, e.g., card information, and then transmits the modulated information to the transceiver 200 connected to or embodied in the vending machine 900.
• the transceiver 200 demodulates and decrypts the received information to provide the decrypted information to the vending machine 900 via the data interfacing unit 250 so that the user can obtain products corresponding to the preset amount of money from the vending machine 900.
• the fingerprint authentication process is performed at the portable terminal 100 before transmitting the modulated information.
• the modulated information can be transmitted to the transport card terminal 800.
• the present invention can be associated with a VAN terminal 950 to pay a fare or a price of a product by using the portable terminal 100 having a credit card function therein.
• This embodiment also has a predetermined portion of the storage unit 160 assigned to store data or information required to implement the credit card function.
• this credit card function is selected, e.g., by inputting a corresponding code via the data entry unit 120, the portable terminal 100 is initiated to perform the selected credit card function.
• the portable terminal 100 is initiated to perform the selected credit card function.
• the price is transferred to the portable terminal 100 via the transceiver 200 and displayed on the display unit 130 of the portable terminal 100.
• a user sequentially provides installment information and fingerprint data to the portable terminal 100 through the data entry unit 120 and the fingerprint scanning unit 110, respectively, the installment information and the fingerprint data are encrypted together with card information retrieved from the storage unit 160 and then transmitted to the transceiver 200 via the direct communication transceiver unit 170.
• the transceiver 200 decrypts the encrypted information transmitted from the portable terminal 100 and delivers the decrypted information to the VAN terminal 950 through the data interfacing unit 250.
• the VAN terminal 950 transfers the installment information, the price of the product, the card information and the fingerprint data to a VAN company (not shown) in order to get a transactional permission.
• the VAN company performs a transaction authentication based on the fingerprint data and the card information in order to determine whether or not permitting the required transaction.
• the VAN terminal 950 transfers the permission number to the transceiver 200, which then encrypts the permission number and transmits it to the portable terminal 100.
• the portable terminal 100 receives the transmitted permission number and displays it on the display unit 130. Through the processes, the transaction is completed.
• the fingerprint data may be used for the user authentication only at the portable terminal 100 without being transmitted to the transceiver 200.
• the portable terminal 100 incorporates therein an electronic money function, it is possible to transfer money between two portable terminals situated nearby. For instance, if a user of a portable terminal wants to send a predetermined amount of money to a use of another portable terminal, the user of the first portable terminal selects the electronic money transfer function by inputting a corresponding code and then inputs a predetermined amount of money to be transferred and an identification information verifying the second portable terminal, e.g., a telephone number. Thereafter, the user of the first portable terminal provides his or her fingerprint data through the fingerprint scanning unit 110 for fingerprint authentication.
• the first portable terminal After the authentication is successfully accomplished and the first portable terminal is connected to the second portable terminal, the first portable terminal transmits an instruction signal to the second portable terminal through the direct communication transceiver unit 170.
• the second portable terminal prepares a money transmission protocol in response to the instruction signal and sends a ready signal representing that the second terminal is ready to accept the money to be transferred.
• the first portable terminal receives the ready signal from the second portable terminal to thereby recognize that the protocol is prepared, the first portable terminal sends transfer data representing the predetermined amount of money being transferred to the second portable terminal.
• the second portable terminal Upon receiving the transferred data, the second portable terminal issues a transfer completion signal indicating a safe receipt of the transferred money at the second portable terminal and stores a sum of the amount of money transferred and the previous amount of money stored in a storage thereof.
• the first portable terminal receives the transfer completion signal from the second portable terminal and stores therein an amount of money determined by subtracting the amount of money transferred from the previous amount of money stored in a storage thereof if the successful money transfer is verified between the first portable terminal and the second portable terminal. It is to be understood that the electronic money transfer described above can be achieved between two portable terminals spaced apart via a base station.
• the portable terminal 100 can selectively employ one of the direct communication transceiver unit 170 and the base station communication transceiver unit 180. If only the direct communication transceiver unit 170 is employed in the portable terminal 100, the portable terminal 100 can perform functions associated with local area communications only. On the other hand, if only the base station communication transceiver unit 180 is employed in the portable terminal 100, all the functions described above can be accomplished via a base station.
• the aforementioned functions are preferably implemented by using a wireless portable phone, e.g., a PCS phone, a cellular phone or the like, further employing the direct communication transceiver unit 170 and the fingerprint scanning unit 110 therein.
• a terminal which employs the direct communication transceiver unit 170 and optionally incorporates the fingerprint scanning unit 110, can also accomplish the above functions other than the phone banking requiring the long-distance communication. Therefore, it will be apparent to those skilled in the art that the portable terminal 100 can be of a type other than a wireless portable phone .
• the signals or data transmitted between the transceiver 200 and a conventional host apparatus are preferably of the types identical to those of the signals or data between the host apparatus and conventional input/output terminals thereof; and the transceiver 200 is coupled to the conventional host apparatus in parallel with the conventional input/output terminals thereof.
• the inventive transceiver 200 can be easily incorporated with the conventional host apparatus. That is, by using the transceiver 200 generating the signals or data identical to those for the conventional apparatus, it is possible to perform a related function between the above inventive wireless portable terminal and the conventional host apparatus without altering the configuration thereof.
• two selection schemes are employed as described above: one is that a user selects a specific function by inputting a selection code corresponding to the specific function through the data entry unit 120; and the other is that the transceiver 200 specified to the host system performing the specific function continuously broadcasts an establishing signal in a predetermined narrow area close thereto and, then, the portable terminal 100 receives the establishing signal to thereby perform the specific function in response to the establishing signal .
• the portable terminal 100 can be devised to initiate each function by the other one of the schemes or by both the schemes.
• biometric data other than the fingerprint data can be used for the user's authentication.

Landscapes

• Engineering & Computer Science (AREA)
• Business, Economics & Management (AREA)
• Accounting & Taxation (AREA)
• General Physics & Mathematics (AREA)
• Physics & Mathematics (AREA)
• General Business, Economics & Management (AREA)
• Strategic Management (AREA)
• Theoretical Computer Science (AREA)
• Computer Networks & Wireless Communication (AREA)
• Finance (AREA)
• Computer Security & Cryptography (AREA)
• Microelectronics & Electronic Packaging (AREA)
• Development Economics (AREA)
• Economics (AREA)
• Signal Processing (AREA)
• Mobile Radio Communication Systems (AREA)
• Transceivers (AREA)
• Selective Calling Equipment (AREA)
• Facsimiles In General (AREA)

Applications Claiming Priority (7)

Publications (1)

Family

ID=27349940

Family Applications (1)

Country Status (10)

Families Citing this family (36)

Family Cites Families (6)

• 1999
  • 1999-08-30 KR KR1019990036341A patent/KR20000067773A/ko not_active Application Discontinuation
  • 1999-11-26 JP JP2000613113A patent/JP2003523107A/ja active Pending
  • 1999-11-26 CA CA002371134A patent/CA2371134A1/en not_active Abandoned
  • 1999-11-26 AU AU15852/00A patent/AU1585200A/en not_active Abandoned
  • 1999-11-26 IL IL14607399A patent/IL146073A0/xx unknown
  • 1999-11-26 WO PCT/KR1999/000713 patent/WO2000064093A1/en not_active Application Discontinuation
  • 1999-11-26 CN CN99816709A patent/CN1367966A/zh active Pending
  • 1999-11-26 EP EP99958495A patent/EP1179241A2/en not_active Withdrawn
• 2000
  • 2000-01-10 AR ARP000100082A patent/AR022232A1/es active IP Right Grant
• 2003
  • 2003-03-04 HK HK03101612.3A patent/HK1050283A1/zh unknown

Non-Patent Citations (1)

Also Published As

Similar Documents

Legal Events