Dual-sided smart card reader

[0001] The present application claims priority to U.S. Provisional Patent Application No. 60/532,393, filed Dec. 24, 2003.

[0002] The present invention relates to smart card readers, and in particular to a dual-sided smart card readers.

[0003] Smart card readers have been known for some time. However, conventional smart card readers do not provide the ability to independently verify the identity of a smart card holder. Additionally, conventional smart card readers do not permit dual-sided operation, such that at least two (2) smart cards may be inserted into a single card reader simultaneously. Finally, conventional smart card readers do not provide the ability to visually display information regarding data stored on a smart card.

[0004] Thus, there is presently a need for a smart card reader system which permits user identification, and which allows insertion of multiple smart cards simultaneously. There is also presently a need for a smart card reader system which permits the visual display of information.

[0005] An exemplary embodiment of the present invention comprises a smart card reader including a first input port disposed on a first side of the reader, and a second input port disposed on a second opposing side of the reader.

[0006] Another exemplary embodiment of the present invention comprises a smart card system including at least two smart cards, and a dual-sided smart card reader including a first input port disposed on a first side of the smart card reader, and a second input port disposed on a second opposing side of the smart card reader.

[0007] An additional exemplary embodiment of the present invention comprises a method for facilitating secure transactions including the steps of: inserting a first smart card into a first slot of a dual-sided smart card reader, inserting a second smart card into a second slot of the dual-sided smart card reader, said second slot disposed on an opposing side of the smart card reader, determining if a holder of the first smart card is authorized to access information on the second smart card, and permitting the holder of the first smart card to access information stored on the second smart card.

[0008] An exemplary embodiment of the present invention comprises a smart card reader including a first input port disposed on a first side of the reader for receiving a first smart card, a second input port disposed on a second opposing side of the reader for receiving a second smart card, and at least one biometric device for obtaining a biometric sample.

[0009] FIG. 1 shows a top view of a dual-sided smart card reader according to a first exemplary embodiment of the present invention.

[0010] FIG. 2 shows the dual-sided smart card reader of FIG. 1 with smart cards inserted therein.

[0011] FIG. 3 shows the dual-sided smart card reader of FIG. 1 with users providing fingerprint samples.

[0012] FIG. 4 shows a dual-sided smart card reader according to a second exemplary embodiment of the present invention.

[0013] FIG. 5 shows the dual-sided smart card reader of FIG. 4 displaying confidential information.

[0014] FIG. 6 shows the dual-sided smart card reader of FIG. 1 additionally including a vein scanner.

[0015] FIG. 7 shows the dual-sided smart card reader of FIG. 1 additionally including a hand geometry scanner.

[0016] FIG. 1 snows a first exemplary embodiment of the present invention comprising a dual-sided smart card reader 100 which permits the insertion of smart cards from either, or both sides thereof. The dual-sided smart card reader 100 may also include fingerprint pads 120, 121 on either, or both, sides thereof.

[0017] As shown in FIG. 2, the dual-sided smart card reader 100 includes first and second insertion ports 101, 102 for the insertion of first and second smart cards 150, 160. Once the smart cards 150, 160 are inserted into the reader 100, the fingerprint pads 120, 121 may be utilized to provide independent verification of the identity of the person carrying the card.

[0018] In operation, smart card holders insert their respective smart cards 150, 160 into the respective insertion ports 101, 102 of the smart card reader 100. In addition to providing the smart cards 150, 160, a user may additionally provide some type of biometric information (e.g., a fingerprint sample) which may be used to verify the identity of the user. As shown in FIG. 3, one method of user verification may be accomplished by having the respective users of the smart cards 150, 160 place their finger or thumb on the fingerprint pads 120, 121. The fingerprint pads 120, 121 accept the fingerprint sample and electronically compare the sample to the fingerprint data stored on the user's smart card. If the fingerprint data matches, the user is verified and may continue with transactions using the card reader 100. However, if the fingerprint data does not match, the user is prohibited from using the card reader 100 further.

[0019] In a second exemplary embodiment shown in FIG. 4, a dual-sided smart card reader 200 may include a Liquid Crystal Display (LCD), or other similar display, for displaying information to either, or both, of the users of the card reader. For example, the dual-sided smart card reader 200 may include a display screen 270 which may be viewable by one user only, thereby limiting access to information in an information sensitive environment (e.g., medical record access; police access, etc.).

[0020] As with the smart card reader 100 described above, the smart card reader 200 includes insertion ports 201, 202 for receiving smart cards 250, 260. The smart card reader 200 also includes a keypad 275 for navigating through the menus and information on the display screen 270. In the exemplary embodiment shown in FIG. 4 the smart card reader 200 does not include fingerprint pads, but those of ordinary skill in the art will realize that fingerprint pads (220, 221) may be optionally provided.

[0021] As shown in FIG. 5, the display screen 270 may provide sensitive information to a first user whose card is inserted in the first insertion port 201 (e.g., police officer) about a second user who has his or her smart card inserted in the second insertion port 202. For example, the display screen 270 may provide information on the second user's driving and/or criminal record.

[0022] The above-described dual-sided smart card readers 100, 200 may be coupled to a personal or other computer via a Universal Serial Bus (USB) port, a FireWire™ port, a wireless transmitter, or other equivalent means disposed in, or operatively coupled, to the card reader.

[0023] Additionally, the dual-sided smart card readers 100, 200 described above may be configured to operate on battery power, or may include means for powering the card reader from a standard electrical outlet. The dual-sided smart card readers 100, 200 may also include either an internal or external power source.

[0024] As an alternative to, or in addition to, the fingerprint pads 120, 121 (220, 221) discussed above, a dual-sided smart card reader 300 may include vein scanners 380, 381 disposed therein, or operatively coupled thereto, as shown in FIG. 6. Vein scanners may scan the pattern of veins on the back of the human hand to provide authentication, similar to a fingerprint scan. Vein scanners may be often preferred over fingerprint scanners at times because the person being scanned does not need to directly contact the unit in order to be scanned. The person being scanned merely holds their hand in close proximity to the vein scanner to be scanned (similar to scanning a bar code with an infrared bar code scanner).

[0025] As an alternative to, or in addition to, the fingerprint pads 120, 121 (220, 221) and vein scanners 380, 381 discussed above, a dual-sided smart card reader 400 may include hand geometry scanners 490, 491 disposed therein, or operatively coupled thereto, as shown in FIG. 7. Hand geometry scanners may scan (e.g., photograph) the three-dimensional shape of the human hand to provide authentication. Hand geometry scanners may be preferred over fingerprint scanners at times because the person being scanned does not need to directly contact the unit in order to be scanned. The person being scanned merely holds their hand in close proximity to the hand geometry scanner to be scanned.

[0026] Some hand geometry scanners take over ninety (90) measurements of the length, width, thickness and surface area of the hand and four fingers. The technology can use a thirty-two thousand (32,000) pixel Charge Coupled Device (CCD) digital camera to record the hand's three-dimensional shape from silhouetted images projected within the scanner. The scanner disregards surface details, such as fingerprints, lines, scars, dirt, as well as fingernails. Because the scanner uses the unique shape of the user's hand to verify identity, it can be used in machine shops, factories, manufacturing plants, and almost any industrial environment where fingerprint scanners would not be ideal. When a person uses the scanner, the scanner compares the shape of the user's hand to a template recorded during an enrollment session. If the template and the scanned hand match, identity is verified.

[0027] The above-described smart cards 150, 160 (250, 260) preferably contain multiple types of information associated with the user of the smart card. For example, the smart cards 150, 160 (250, 260) may each include two (2) distinct memory areas, one for storage of confidential information, and one for storage of biometric data (e.g., fingerprint, retina, hand geometry, etc.) associated with the user. The confidential information memory storage area may be further subdivided into separate memory compartments corresponding to separate types of information, including but not limited to: (1) a health insurance and medical record compartment, (2) a homeland security compartment (for storage of passport information and travel restrictions), (3) a financial records compartment (for storage of bank and credit card accounts), (4) a law enforcement compartments (for storage of driver's license information, criminal record, etc.), and (5) a personal storage compartment (for storage of telephone numbers, electronic documents, etc.). Preferably, each smart card reader 100, 200 would restrict access only to the memory compartment(s) necessary to accomplish certain activities (i.e., a police smart card reader would not be permitted to access medical records).

[0028] In the preferred exemplary embodiments, information stored in the confidential information memory storage of the smart cards 150, 160 area may be added, edited or deleted by any authorized smart card reader 100, 200. For example, where a smart card reader 100, 200 is used by a doctor and a patient, an authorized doctor may update the patient's medical records stored on the card.

[0029] As explained below, the dual-sided smart card readers 100, 200 may be used in various situations, such as for example, facilitating the transfer of patient medical records between health care providers, reducing or eliminating identity theft, reducing or eliminating fraud in financial and personal transactions, facilitating compliance with the Health Insurance Portability and Accountability Act (HIPAA) with regard to patient medical records, and various other environments where confidentiality of information must be maintained.

[0030] For example, generally under HIPAA: (1) patients are entitled to have access to their medical records and request amendments thereto, (2) healthcare providers must keep audit trails for patient records, (3) healthcare providers must receive patient authorization before release of medical information, and (4) healthcare providers must take care that medical information is not released for non-health related purposes. The dual-sided smart card readers 100, 200 described above can assist in accomplishing all these objectives, by for example, requiring a patient and a healthcare provider to present smart cards (and possibly verifying biometric data) before transactions regarding medical records are completed.

[0031] The dual-sided smart card readers 100, 200 are preferably used in a Provider-Consumer model. For example, before the provision of goods and/or services, a Provider inserts its card into one side of the dual-sided smart card reader 100, 200, and provides further identification (fingerprint, vein, hand, etc.), if necessary or required. The Consumer receiving these goods and/or services similarly inserts his card into the opposite side of the dual-sided smart card reader 100, 200 and provides further identification (fingerprint, vein, hand, etc.), if necessary or required. Once both the Provider and the Consumer have been verified, they can deal with each other on a fair and equal plane, without fear that one is acting in a fraudulent manner.

[0032] An exemplary situation in which the dual-sided smart card readers 100, 200 may be utilized is as follows during a medical office visit. As a prerequisite, patients are issued a smart card by a health care provider or organization (e.g., Health Maintenance Organization (HMO), Medicare, etc.) which has the capability to retain medical records and other information (e.g., insurance information). When the patient visits his or her physician, they present the smart card for insertion into one side of the dual-sided reader 100, 200. The patient may also be required to place a finger (or thumb) on a fingerprint pad on the card reader to provide further verification. As discussed above, vein and hand geometry scanners may also be utilized to provider authentication.

[0033] Similarly, the physician presents his smart card (and fingerprint, vein and/or hand, if necessary) at the opposite side of the card reader 100, 200. The card reader 100, 200 verifies the identity of the patient and the physician and permits the physician to upload medical records from the patient's card, or download medical records and/or observations to the patient's card. For example, the physician may upload observations of a physical examination to the smart card, upload a log of procedure performed and results, or download known allergy information. In this manner, a patient's confidential medical history information may be shared only with authorized physicians, and may be modified only by authorized physicians. Each upload or download is preferably marked with a date/time stamp, so that a modification ‘trail’ can be established. A visual image may be presented on a display screen 270 coupled to the dual-sided smart card reader 200 to inform either the patient, the physician, or both, that the authentication has been successful.

[0034] If certain examinations or procedures have been performed during an office visit (and uploaded to a patient's smart card), such information may also be transmitted to the patient's insurance carrier (e.g., HMO) for processing, by either the physician's office or the patient. The examination/procedure information stored on the patient's smart card, and possibly sent to the insurance carrier, may comprise Emergency/Medical (E/M) codes, diagnosis codes, fee charged, patient's name, insurance provider, insurance number, insurance provider number and other relevant data.

[0035] The above-described scenario may also take place between the patient, and a physician's various administrative personnel (e.g., nurses, billing assistants, receptionists, etc.). For example, the patient would present his smart card (and any physiologic data) at one end of the dual-sided smart card reader 100, 200 as discussed above, and the administrative user would present their smart card (and any physiologic data) at the other end of the dual-sided smart card reader. Once the patient and administrative user have been authenticated, the administrative user is permitted to access the patient's personal information, medical records, billing records, and other information on file with the physician's office. A visual image may be presented on a display screen 270 coupled to the dual-sided smart card reader 200 to inform either the patient, the administrative user, or both, that the authentication has been successful. As with the patient-physician example, each upload or download by the administrative user is preferably marked with a date/time stamp, so that a modification ‘trail’ can be established.

[0036] Another exemplary situation in which the dual-sided smart card readers 100, 200 may be utilized is as follows in a routine traffic stop by the police. As a prerequisite, automobile drivers are issued a driver's license in the form of a smart card. The smart card may be adapted to retain a driver's personal information (e.g., name, address, driver's license number, etc.) and driving record information (e.g., previous infractions).

[0037] When a driver is pulled over by a police officer for an infraction (e.g., speeding, etc.), the police officer requests the driver's smart card and inserts the smart card into the dual-sided smart card reader 100, 200 (at one end) along with his own identification smart card (at the opposite end) (See FIGS. 4-5). The police officer may additionally request fingerprint, vein and/or hand geometry data from the driver, as explained above, to provide further identity verification. The police officer may also be required to submit further data such as fingerprint, vein and/or hand geometry data, in order to verify his identity.

[0038] Once the police officer has been authorized to view the driver's personal and driving data, the data is presented to the police officer, preferably on a display screen 270 which forms a part of the dual-sided smart card reader 200, or is operatively coupled thereto (in the case of the smart card reader 100). In the manner, the police officer can review the driver's history of infractions, and make an informed decision on the present infraction, and the possible need for arrest. If the police officer decides to issue an infraction notice and summons (i.e., ‘ticket’), the police officer can upload this information directly to the driver's smart card, thereby maintaining updated information on the driver's smart card at all times.

[0039] Although exemplary embodiments of the present invention have been discussed above utilizing fingerprint scanners, vein scanners and hand geometry scanners, it will be understood by those of ordinary skill in the art, that various types of biometric data may be utilized to confirm the identity of a user (e.g., retinal, blood, skin tissue, etc.).

[0040] Although the invention has been described in terms of exemplary embodiments, it is not limited thereto. Rather, the appended claims should be construed broadly to include other variants and embodiments of the invention which may be made by those skilled in the art without departing from the scope and range of equivalents of the invention.