US5526428A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Access control apparatus and method
Assignee: Lenovo PC International Ltd
•
Filing: 1993-12-29
•
Granted: 1996-06-11
•
Expires: 2013-12-29
Abstract
Abstract An improved access control apparatus, method, and system are disclosed to enhance the security of information in cards of the type having data storage and functions which are not accessible without verification of the identity and the authority of a person requesting access. The card need not include identification information for others that may require access to information in a person's card. Several authorization profiles are provided in a card, but there is no need that a profile be identified to any one person in order that they each may perform required tasks using or adding information in another person's card. The identification card of a supervisor or doctor who requires access to another person's card contains secret information Xsup identifying the supervisor or doctor as having the authority of supervisor or physician and an encryption key. The secret authorization information is encrypted and transmitted through the reader to the other person's card where it is decrypted and compared with the X'sup secret value stored in the other person's card. If they agree, the supervisor is permitted to perform functions authorized to be performed by supervisors in accordance with the profile for supervisors in the other person's card. Each supervisor is identified by a supervisor's own card using a password, PIN, or biometrics that may be changed as often as desired without recalling the cards of others for update. The authorization information is not exposed outside of a secure environment. Therefore, unlike PINs which are exposed during entry, it need not be changed or updated during the life of the card.
Inventors
- 👤 Todd W. Arnold
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-29 23:40
CPC Classifications
G; G06; G06K; G06K19/00; G06K19/06; G06K19/067; G06K19/07; G06K19/073; G07; G07F; G07F7/00; G07F7/08; G07F7/10; G07F7/1008; G06Q; G06Q20/00; G06Q20/22; G06Q20/229; G06Q20/2295; G06Q20/30; G06Q20/34; G06Q20/341; G06Q20/36; G06Q20/367; G06Q20/3674; G06Q20/38; G06Q20/40; G06Q20/409; G06Q20/4097
Claims Analysis
Total Claims: 28
Claim 1
Independent Claim
64 words
An information element comprising: means for storing a test authorization value, said test authorization value being related for all persons having the same authority; means for comparing said test authorization value with a trial authorization value received from an element interface; means for allowing access to information in said information element only if said test authorization value compares positively with said trial authorization value.
Claim 2
Dependent Claim
64 words
An information element comprising: means for storing a test authorization value, said test authorization value being related for all persons having the same authority; means for comparing said test authorization value with a trial authorization value received from an element interface; means for allowing access to information in said information element only if said test authorization value compares positively with said trial authorization value.
Claim 3
Dependent Claim
14 words
The information element of claim 1 wherein said authorization value is a numerical value.
Claim 4
Dependent Claim
14 words
The information element of claim 1 wherein said information element is an IC card.
Claim 5
Dependent Claim
15 words
The information element of claim 3 wherein said element interface is an IC card reader.
Claim 6
Dependent Claim
20 words
The information element of claim 1 wherein said access to information is the performance of a function upon such information.
Claim 7
Dependent Claim
19 words
The information element of claim 5 wherein said function is the setting of control information in said information element.
Claim 8
Dependent Claim
19 words
The information element of claim 6 wherein said control information in said information element is a personal identification number.
Claim 9
Dependent Claim
19 words
The information element of claim 6 wherein said control information in said information element is a maximum value limit.
Claim 10
Dependent Claim
16 words
The information element of claim 1 wherein said information in said information element is medication information.
Claim 11
Dependent Claim
15 words
The information element of claim 1 wherein said information element is a personal identification card.
Claim 12
Dependent Claim
94 words
An element interface comprising: means for receiving an identification element in communicating relationship with said interface; means for receiving from said identification element, a trial authorization value, said trial authorization value being the same for all persons having similar identification elements and the same authority; means for sending said trial authorization value to an information element, means for instructing said information element to perform a function in said information element, said function being performed only upon the positive correlation of said trial authorization value and a test authorization value stored in said information element.
Claim 13
Dependent Claim
94 words
An element interface comprising: means for receiving an identification element in communicating relationship with said interface; means for receiving from said identification element, a trial authorization value, said trial authorization value being the same for all persons having similar identification elements and the same authority; means for sending said trial authorization value to an information element, means for instructing said information element to perform a function in said information element, said function being performed only upon the positive correlation of said trial authorization value and a test authorization value stored in said information element.
Claim 14
Dependent Claim
30 words
The element interface of claim 11 further comprising: means for storing said trial authorization value; means for removing said identification element and for receiving said information element in its place.
Claim 15
Dependent Claim
26 words
The element interface of claim 12 wherein said identification element and said information element are IC cards and said element interface is an IC card reader.
Claim 16
Dependent Claim
30 words
The element interface of claim 12 further comprising means for receiving from a person, a personal identification verification value to verify the identity of a person holding said identification element.
Claim 17
Dependent Claim
29 words
The element interface of claim 14 wherein said element interface includes a computer having a keyboard, and said means for receiving said personal identification verification value is said keyboard.
Claim 18
Dependent Claim
49 words
An identification element comprising: means preprogrammed into said identification element for storing a trial authorization value; means for sending said trial authorization value from said identification element to an element interface, said trial authorization value being the same for all persons having similar identification elements and the same authority.
Claim 19
Dependent Claim
49 words
An identification element comprising: means preprogrammed into said identification element for storing a trial authorization value; means for sending said trial authorization value from said identification element to an element interface, said trial authorization value being the same for all persons having similar identification elements and the same authority.
Claim 20
Dependent Claim
15 words
The identification element of claim 16 wherein said trial authorization value is a numerical value.
Claim 21
Dependent Claim
14 words
The identification element of claim 16 wherein said identification element is an IC card.
Claim 22
Dependent Claim
15 words
The identification element of claim 18 wherein said element interface is an IC card reader.
Claim 23
Dependent Claim
20 words
The identification element of claim 16 further comprising means for storing information relevant to an authorized holder of said element.
Claim 24
Dependent Claim
20 words
The identification element of claim 20 wherein said information relevant to an authorized holder of said element is medical information.
Claim 25
Dependent Claim
15 words
The information element of claim 16 wherein said identification element is a personal identification card.
Claim 26
Independent Claim
221 words
The method of granting access to information in an information element comprising the steps of: inserting an identification element into an element reader; establishing a session key KS1 between a computer in said identification element and a computer controlling said reader; computing in said identification element, a value eKS1(Xsup) of the encryption of an authorization value Xsup under said session key KS1; sending said value eKS1(Xsup) to said computer controlling said reader; computing in said computer controlling said reader, a value dKS1(eKS1(Xsup)) of the decryption of said value eKS1(Xsup) under said session key KS1; removing said identification element from said reader to make way for said information element; inserting said information element into said reader; establishing a session, key KS2 between a computer in said information element and said computer controlling said reader; computing in said computer controlling said reader, the value eKS2(dKS1(eKS1(Xsup))) of the encryption of the authorization value dKS1(eKS1(Xsup)) under the session key KS2; sending said value eKS2(dKS1(eKS1(Xsup))) to said information element; computing in said information element, the value dKS2(eKS2(dKS1(eKS1(Xsup)))) of the decryption of said value eKS2(dKS1(eKS1(Xsup))) under said session key KS2; comparing in said computer in said information element, said value dKS2(eKS2(dKS1(eKS1(Xsup)))) with a test authorization value X'sup; allowing execution of commands in said information element if said value dKS2(eKS2(dKS1(eKS1(Xsup)))) compares positively with said test authorization value X'sup.
Claim 27
Independent Claim
221 words
The method of granting access to information in an information element comprising the steps of: inserting an identification element into an element reader; establishing a session key KS1 between a computer in said identification element and a computer controlling said reader; computing in said identification element, a value eKS1(Xsup) of the encryption of an authorization value Xsup under said session key KS1; sending said value eKS1(Xsup) to said computer controlling said reader; computing in said computer controlling said reader, a value dKS1(eKS1(Xsup)) of the decryption of said value eKS1(Xsup) under said session key KS1; removing said identification element from said reader to make way for said information element; inserting said information element into said reader; establishing a session, key KS2 between a computer in said information element and said computer controlling said reader; computing in said computer controlling said reader, the value eKS2(dKS1(eKS1(Xsup))) of the encryption of the authorization value dKS1(eKS1(Xsup)) under the session key KS2; sending said value eKS2(dKS1(eKS1(Xsup))) to said information element; computing in said information element, the value dKS2(eKS2(dKS1(eKS1(Xsup)))) of the decryption of said value eKS2(dKS1(eKS1(Xsup))) under said session key KS2; comparing in said computer in said information element, said value dKS2(eKS2(dKS1(eKS1(Xsup)))) with a test authorization value X'sup; allowing execution of commands in said information element if said value dKS2(eKS2(dKS1(eKS1(Xsup)))) compares positively with said test authorization value X'sup.
Claim 28
Dependent Claim
23 words
The method of claim 23 wherein said step of allowing execution further comprises the step allowing access to information in said information element.
References Cited (Backward Citations)
US4095739A
Cited
US4238853A
Cited
US4864614A
Cited
US4816653A
Cited
US4802218A
Cited
US4900903A
Cited
US5010237A
Cited
US5150409A
Cited
US4837422A
Cited
US4897874A
Cited
US5055658A
Cited
US5048085A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1999-06-11 | 1999-12-11 | 2000-06-11 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2003-06-11 | 2003-12-11 | 2004-06-11 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2007-06-11 | 2007-12-11 | 2008-06-11 | $7700.00 | Window Closed / Lapsed |