US 5,161,190 AGrant
System for Encryption and Identification
Issue Date:1992-11-03
•11 Claims
•16 Drawing Sheets
Abstract
A delay means in a security apparatus for identifying a code of characters to authenticate access to the apparatus by matching an entered code with a stored value by a procedure which so enciphers the coded information as it is entered into the apparatus and displayed on a keyboard that disclosure of the code by observation of the entry operation is prevented. A delay timing circuit produces a delayed signal in the matching of the entered code and the stored value so that the length of the period of time for authentication is controllable.
Metadata
Assignee
- Computer Security Corp.
Inventor
- John P. Cairns
Application Information
Application Number:US 5936632
Filing Date:1990-10-05
Priority Date:1987-09-10
Art Unit:222
Classifications
IPC:
G06F 302
Field of Search:
3802353403413-5;9;23-25;49;50;52;59380;382543;712;766;825.3;825.31;825.3423;175
Patent Drawings (16 sheets)
Description
This invention relates to a cryptographic system capable of operating to enter coded characters into a method and apparatus for the comparisons of values of characters.
This invention relates to a security system for controlling access to secured areas and to computer terminals and similar subjects to which access is restricted. The invention relates in particular to access control systems in which data is entered in an access control system by selective actuation of a data input keyboard and manual generation of digital data in the form of electronic signals. More particularly this invention relates to establishing the validity of a code employed for access and control of variations in time periods occuring in the establishment of validity.
Background of the Invention
For security protection of subjects to which restriction of access is desirable, a major requirement is individual accountability of persons gaining such access. User indentification and authentication are prime requirements in effecting this individual accountability.
A password-based user authentication mechanism, with the password being kept secret at all times has advantages over key cards.
It is desirable to have a user when seeking access to a restricted subject to use a keyboard and generate the electronic signals that authenticate the user and result in access. The disadvantage to such manual operation of a selective sequence of keys on the keyboard is its vulnerability to detection by mere observation. It is also desirable to enable the authentication mechanism to vary the length of time periods in the authenticating procedures.
A keyboard is defined as a plane which is partitioned into M*N elements where "M" is the number of rows and "N" is the number of columns.
In a specific embodiment herein these M*N elements consist of a push button and an 8 segment light emitting diodes or liquid crystal display, and represented by Kij in the expression, matrix position coefficient.
It is an object to preserve the confidentiality of the process of entering the data by actuation of a keyboard, and preventing an observer from detecting the access code by watching a user operate the keyboard and by displaying the character in an apparent random but in fact predetermined arrangement a distraction factor is introduced.
The object of the invention is means for entering a code of characters into a system for identification and authentication which performs a comparison by a procedure which so enciphers the coded information as it is entered into the system and displayed on a keyboard as to prevent disclosure of the code by observation of the keyboard display.
An object of the invention is establishing the identity of a user for accessing and particularly providing authentication by means of an apparatus and a process for establishing the validity of an access code and the issuance of a signal and indicative of whether an authentic or unauthentic character has been processed.
More particularly it is an object of the present invention to provide measurable and variable finite periods during the establishment of the validity of an access code and the issuance of signals occurs so that the duration of the authentication is controlled.
A still further object is the provision of an apparatus and a process for combining the authentication procedures with concomitant operations, particularly operating relating to security.
Definitions
The following are definitions of terms as used herein;
Authentication
Apparatus and process for establishing the validity of an access code or for verifying a users authorization for access.
Data Bus
A system for moving data by a group of wires forming a common bus.
Comparator
A unit that compares two binary numbers telling whether the numbers are equal, one-greater-than-the-other or visa-versa.
Binary Coded Decimal
A representation of an alphanumeric character converted into a string of 1's or zeroes or in a binary code which for description purposes here are in four bit groups.
Counter
A special kind of register made up of flip-flop circuits with one input and usually a output from each flip-flip, which counts pulses arriving at the input and stores the total count in a certain code (usually binary numbers).
Clock Input
An input terminal on a unit typically used for receiving a timing control-clock signal, but used in some applications for a control signal or even data.
Programmable
A circuit which can be set with a fixed program.
Matrix
A rectangular array of elements within a perimeter and comprised of positions arranged in rows and columns.
Cycle
An interval of space or time in which one set of events or phenomena is completed.
Character
An electronic signal formed by the system for representation of information, and including integers and letters.
Code
A set of meanings assigned to groups of bits made up of binary representations or binary states provided by a sequence of high and low voltage areas.
Exclusive-or Gate
A device with two inputs of binary digital information and one output, whose output is 1 when either input is but is 0 if neither or both inputs are 1.
Byte
A sequence of adjacent binary digits operated as a unit.
Character String
A group of characters forming a code or password.
Alphabet
A set of symbols or signals that serve as equivalents of letters. In the present embodiment the alphabet consists of integers, letters and matrix coefficients.
Variable Visible Indicia
Letters and integers appearing on suitable display means, such as light emitting diodes (LEDs), liquid crystal lights, nixie and gaseous discharge tubes.
Symbol
A letter, integer or matrix coefficient.
Password
A string of symbols of letters, integers or matrix coefficients having a length defined by a beginning and an end.
Matrix Position Coefficient
A coordinate position within the matrix defined by row and column and symbolized by Kij (specific row and column). In the present invention it is a factor in a password which is the position in the matrix of variable visible indicia as established by row and column at a given symbol of the string of symbols making up the password length, herein after referred to as matrix coefficient.
Display Cycle
The time intervals making up the logging in by a log-in user of a symbol.
Brief Description of the Invention
According to this invention a keyboard is provided in a system which operates to detect the correct code (hereinafter referred to as password), which is entered into the system by actuating keys on the keyboard. The keyboard consists of a matrix of keys and variable visible indicia of integers and letters. The matrix is a rectangular array of keys and the variable visible indicia are shown on display means, such as LEDs, associated with the respective keys. In this invention the symbols appearing on the LEDs in the matrix are subjects of the code alphabet from which the string of symbols for the password is selected. Thus, in this invention a string making up the password is made up of matrix coefficients as well as binary digits representing integers and letters.
In accordance with this invention a system for password-based user identification impacts the characters and matrix coefficients making up the alphabet from which the string of symbols for the password are selected. Herein the password as used herein is a string of symbols used to authenticate an identity, particularly the identity of a user seeking to obtain access to a restricted subject by logging in the password.
The present invention departs from the previously disclosed art by increasing the alphabet so as to include the matrix coefficients.
The present invention departs from the previously disclosed art by increasing the alphabet so as to include the matrix coefficients.
In the specific embodiment set forth in the detailed description below the alphabet referred to consists of 26 letters, 10 integers and nine matrix coefficients.
The matrix is a display panel which in the described embodiment is made up of 9 matrix locations represented by LED's. The integers and letters, referred to as characters, appearing on the LED's change with each display cycle which accompanies the logging-in of a symbol for purposes of identification and authentication. A read-only-memory associated with the matrix provides the configuration of characters placed on the matrix with each display cycle. The matrix and its associated ROM are included in an encryption device in the system of this invention. This cryptographing ROM is programmed to provide to the matrix in predetermined manner the display changes correlated with logging in successively password symbols. The ROM is programmed to respond in a predetermined manner to provide these characters in the successive display cycles. The display on the face of the matrix is generated by the program in the encryption ROM. A key feature is that by changing the characters displayed at specific matrix location within the display adds to the desired confusion level.
Each time the cryptographing ROM displays the character, the log-in user effects the entry of a symbol by actuating a switch, such as a button.
The selected symbol is introduced into a microprocessor. The microprocessor is under the control of a program in a ROM associated with the microprocessor. The microprocessor looks for a symbol by looking for a change of character at certain position at the time of logging in the relevant symbol in the string. Accordingly, this ROM can detect either a character or a matrix coefficient as a symbol, as explained in the following detailed description, the program loaded in the ROM provides the processing of authentication of the external introduced characters. This program processes the alphabet characters introduced from the cryptograph into the microprocessor to compare the externally introduced characters by the authenticating program in the ROM.
In other specific embodiments the system for detecting a correct password includes means for introducing a time delay in the establishment of the validity of the access code; or includes means for inducing a delay combined with scanning related functions such as the status of access does or includes means for producing a signal to a telephone system.
Brief Description of the Drawings
FIG. 1 is a block diagram of a cryptograph according to this invention;
FIG. 2 is a timing diagram of typical signals;
FIG. 3 is a detail schematic diagram showing the means for control of the latch select commands;
FIG. 4 is a representative keyboard and display panel according to an embodiment of this invention showing representative characters;
FIG. 5 illustrates an apparatus including the cryptograph for comparison of values according to this invention;
FIG. 6 is a table identifying the matrix of positions on the keyboard;
FIG. 7 is a table of the alphanumeric characters of the present cryptographing system;
FIG. 8 is a flow chart detailing the operation of the system;
FIGS. 9A and 9B are charts of a representative operation;
FIG. 10A and 10B are detailed schematic diagram of circuitry illustrating one embodiment of a cryptograph device according to this invention;
FIG. 11 is a block diagram illustrating apparatus with the cryptograph as illustrated in FIG. 5 with delay circuits according to an embodiment of this invention;
FIG. 12 is a simplified schematic diagram of the embodiment of the cryptograph of this invention utilizing a delay circuit;
FIG. 13 is a flow chart detailing the operation of the system with delay steps;
FIG. 14 is a schematic diagram of a representative embodiment of a delay circuit according to the invention; and
FIG. 15 is a schematic diagram of a representative embodiment for actuating a telephone line with a signal issued by the cryptograph.
Detailed Description
FIG. 1 illustrates a system according to this invention. The system is turned on by actuating a reset button 32. The input of a character into the system is initiated by one of nine buttons 10A-1 represented by nine contact switches 10A-I in FIG. 1. These buttons in the present embodiment are on a display panel or keyboard matrix 33 illustrated in greater detail in FIG. 4 and described below. The triggering of the button 32 results in nine figures appearing in nine various LEDs 30A-I, described below in FIG. 4. Then one of the buttons 10A-I is depressed and a symbol is logged in. This produces nine pulses from a start-stop circuit 11 result in nine characters being decoded at the nine LEDs of FIG. 4 and as described more fully below. This triggering of the start-stop circuit 11, which being a bucket brigade type, operates to produce a sequential cycle of enabling pulses to a gating circuit 12.
In the gating circuit 12 when the output from the start-stop circuit 11 is high, the gating circuit under the signal of this high transmits an output pulse to a switch 13 and energizing switch 13 powers the clock 15 to produce a pulse.
Referring to FIG. 1, the clock 15 provides a train of pulses to switch 13. As explained in greater detail below this is under the control of circuit 11 and the operation of a voltage level provided by a high potential from this circuit 11 through the gating circuit 12 and switch 13 to clock 15. Each pulse to the counter 16 results in the display of a character on a light emitting diode. A matrix 33 of LEDs 30A-30I is illustrated in FIG. 4. The matrix 33 and its LED's 30A-I are represented in FIG. 1 by a block diagram and the buttons 10A-I are similarly diagrammatically represented.
The matrix 33 and its LEd's 30A-30I are an integral part of the means for accessing through the cryptograph technique which is an object of this invention as mentioned above. During the period of the enabling pulse from circuit 11 the start/stop 11 produces a pulse transmitted to the counter 16 on line 17. Referring to FIG. 2 this is a graph of the pulses in the nine time intervals which occur upon actuation triggered by one operation of one of the buttons 10A-I. It will be readily understood that the nine time intervals are related to be coincidental with the nine figures appearing in the LEDs 30A-30I as alphanumeric characters. The nine time intervals make up a display cycle and each operation of one of the buttons 10A-I, is followed by a display cycle of nine time intervals and nine displays. With the actuation of a reset button and the triggering of the display cycle of time intervals in the consequent cycle, the first and enabling pulse from circuit 11 the start/stop 11 produces a pulse transmitted to the counter 16 on line 17. Referring to FIG. 2 this is a graph of the pulses in the nine time intervals which occur upon actuation triggered by one operation of one of the buttons 10A-I. It will be readily understood that the nine time intervals are related to be coincidental with the nine figures appearing in the LEDs 30A-30I as alphanumeric characters. The nine time intervals make up a display cycle and each operation of one of the buttons 10A-I, is followed by a display cycle of nine time intervals and nine displays. With the actuation of a reset button and the triggering of the display cycle of time intervals in the consequent cycle, the first and enabling pulse inititates the first time interval and the first clock pulse to the counter 16.
The pulse from 10A-I is delivered to a timing circuit 18 on line 19. The delay timing circuit 18 issues a pulse to the start-stop circuit on line 22. The timing circuit 18 operates a delay factor in issuing pulse to a data select 29 on line 21.
The delay pulse from timing circuit 18 to data select 20 starts a counting operation within data select 20 which sends a latch select signal over a latch select bus 24 to one of the latches 25A-25I.
FIG. 2 is a timing diagram showing in the suppermost graph the relative timing of the pulses from the clock 15, in the middle graph the pulses from the circuit 18 on line 17 and in the lower graph the pulses from the data select 29 on bus 24 and the braces delineating time intervals in which they occur. The relationship of these pulses to the transmittal of the code characters is explained below.
First, reference is made to the data select 20 which has 9 pins (not shown). The latch select bus 24 is made up of nine latch select lines 23A-I as illustrated in FIG. 3. All of these lines 23A-I are connected to the latches 25A-I from data select 20. As shown in the detail of latch select circuits in FIG. 3, a latch select line 23A connects latch select pin 0 of counter 20 with latch 25A. The match up of latch select pins 0-8, of the data select latch select lines 23A-F and latches 25A-I is as follows:
Each enabling pulse to the data selector actuates in response an output pulse sequentially at one of the latch select pins 0-8. These are latch pulses. When the latch pulse of a select line is applied to one of the latches 25A-I the digital information at the location is read by the latch from the character data buss line 28.
The pulse from the pulse generating system is delivered to the counter 16 on line 17 thru the start/stop partial sum 11. The counter 16 provides an output in a time interval as illustrated in FIG. 2 in response to the pulse from the clock 15. Counter 16 has address lines 26 connected to a ROM 27 and the pulse transmitted to the counter 16 provides output pulse on the address lines 26 which are directed to a selected address in the ROM 27. Each time interval of FIG. 2 has two pulses from clock 15, and the address pulses are directly related to a time interval in which its clock pulse occurs.
Referring to the interrelation of the pulses illustrated in FIG. 2, the nine time intervals are determined by the bucket brigade action from the start-stop circuit 11. The data select 20 when energized by receiving a high from one of the buttons of the set of buttons 10A-I, progresses through this cycle of nine pulses and then shuts off.
To describe this cycling the relationship of the sequencing of the pulses of the trains of pulses is illustrated in FIG. 2. As mentioned above when depressing buttons 10A-I produces a pulse on line 19, a pulse is delivered to the delay timing circuit 18. This in turn produces first a timing pulse back to the start-stop circuit 11 and immediately subsequently a pulse on line 21 to the data select 20. The relationship in point of view of time of these pulses within each time interval is illustrated in FIG. 2.
Each of the nine time intervals, identified 1 thru 9 is initiated by the increase of potential in the form of the clock pulse from clock 15. The pulse on line 19 to timing circuit 18 in turn initiates the timing pulse and subsequently the latch select pulse, which in turn is initiated as the potential on line 22 decreases. The delay timing pulse generates nine consecutive positive succeeding time intervals. As can be seen the sequencing of pulses within each display cycle is repeated in the succession of nine time intervals of the cycling of the data select on each operation of one of the set of buttons 10A-I. The relationship of the timing within the sequences illustrated in FIG. 2 to the functioning of the accessing apparatus of this invention is described below.
The binary number from the counter 16 provides an address in the EPROM 27, which contains a binary CD which will be translated into character in accordance with the enciphered password. This is the enciphered password which authenticates the accessor and authorizes the access. This preselected address, not shown in FIG. 1, contains information for a symbol in accordance with prior programming of the ROM 27. It is an enciphered symbol in accordance with this invention.
Output pulses from the ROM 27 are passed through character lines 28 to the latches 25A-25I. The sequence of time intervals provided by the clock 15 pulses define time periods during which the characters are delivered to the latches 25A-25I and are directly related to cycle of enabling pulses of circuit 11.
Positive character pulses from the address in the ROM 27 are delivered on the character lines that make up the character data buss 28 to the latches 25A-I. The potential levels on the character lines read out of the ROM 27 address are positive pulses on digital "1" or the absence of a pulse or negative pulse digital "0". The latches 25A-I are circuits for storing information about the character which has been read out of the ROM 27 pursuant to the addressing from counter 16. The time interval of the pulse from clock 15 is directly related to the time interval of the writing of the character data bit into the latches.
The delay between the holding the information levels in the data buss line 28 from the ROM 27 and the latch select signal from the data select 20 permits the logic or 0 levels to be held in the data buss before the command is transmitted from counter 20 which latches the character data bits in the selected latch thus decoded by the hard wiring to its LED. The digital information in the latches 25A-I represents the preselected character of the preselected address. This preselection is the programming of ROM 27. Thus the digital information represents part of the enciphered password. The command from the data select 29 triggers the reading out of the held digital levels in the data bus 28 at the segment lines 31 to the segments 29.
Referring again to FIG. 3, from this it is readily seen that each character delivered from ROM 27 on the character lines 28 is latched in each latch 25A-I in the form of potential levels for powering segments 29 in the deciding readout. What is latched in the latches 25A-I is the digital output of the ROM 27 which is the programmed character from the ROM 27 in a digital output signal in "1"s or "0"s or levels.
The circuits of the latches 25A-I for storing the bits of the binary coded decimal character are bistable, having 2 digital outputs, referred to as digital 1 for a logic 1 level and digital 0 for a logic 0 level. Thus there is stored in the latches 25A-I digital 1's for segments 29 which are powered to display light and digital "0"s for segments 29 which are dark.
Each latch 25A-I is connected by the latch select buss from the timing circuit 18 through data select 20 and buss 24. The LED 30A-I which is energized in each cycle is selected by a command from the data select 20. The bit levels on the segment lines 31 to their respective segments 29 result in a decoded display of the character information on the segment 29 making up the selected LED 30A-I. The time interval of the train of pulses from clock 15 is directly related to reading out the decoded BCD's in the displayed characters.
FIGS. 10A and 10B are a schematic diagram illustrating the embodiment. The heart of the pulse generator is a 555 configured in the astable mode, clock pulse generator 15. This device produces asymmetrical waves with a period given as T=0.693 (R1+22)Cl. The wave train is directed to a NAND gate that serves in conjunction with an output from a 74192 gating circuit 12, as a switch designated as switch 13. The gating circuit 12 is formed by the output from a 74192 "borrow" pin to the input to a 7400 NAND gate designated as gating circuit 12. 74192 is a base 10 counter and 74192 is a base 16 counter.
The start/stop partial sum circuit 11 is constructed by cascading two 74193, and binary counters configured in the down mode. In the given configuration the counter substracts one from the count on each positive pulse transition of the clock 15. This continues until a zero binary coded decimal is generated. When the zero is generated pin 13 of circuit 11 the "borrow" function goes low. This inhibits any further clock pulses from the astable configured clock 15 from reaching the trigger input (Pin 4) of the 74192 start/stop circuit 11. The resultant output from the counter 16 is a symmetrical square wave train of pulses with a period of approximately T=1.386 (R1+R2)C1 where R1, R2, C1 are the resistors and capacitors of the configured clock 15.
The output from the counter 16 is transformed into a wave train by using the least significant digit of the binary coded decimal as follows. Selection of a character from the matrix 33 is accomplished by depressing a button 10A-I on the appropriate matrix character which produces a positive square wave which is inverted by the inversion gate of a hexinverter 61. This negative going pulse is applied to the control gate of the octal buffer 62, 74244 which deposits the byte character latched by the octal latch 25 on to the data Bus 100 and displayed by the character chosen display.
The positive pulse is also applied through line 101 to the halfmonostable 63 made of a 7417 non inverting amplifier and the RC network which produces a negative pulse which serves as a trigger pulse for a 556 configured as a delayed pulse generator delay timing 18. The delay time 18 produces a positive pulse which is applied to the input of a 700 NAND gate A. This results in a negative pulse applied to load pin of both the 74192 counter in the start/stop 11 which loads the binary coded decimal located on pins A, B, C and D of the chip into the cascaded 74192 counters of start/stop 11, and of the data select 20. The number 18.sub.10 is loaded and with each clock pulse of one zero to 5V transition or level one is subtracted from the loaded 18.
FIG. 4 shows the representative matrix 33 for this invention, in which the buttons 10A-I and the seven segment LED's 30A-I are arranged in nine position array consisting of first, second and third rows which are explained in detail below. As explained above the logging in is effected by actuation of one of the buttons 10A-I. This starts logging in the password described above.
Each display LED 30A-I position in the matrix 33 is accompanied by one of the button switches 10A-I. The display LEDs 30A-I are energized individually upon the actuation of one of the button switches 10A-I. Hit one button and they all change position.
The latches 25A-I have stored the appropriate characters on the eight character lines in form of the binary coded decimal character from the EPROM 27 address in the form of digital potential levels. The binary coded decimal character data is decoded by being read out as either a "1" or a "0" and displayed on the segment 29. This read out occurs at that one of the latches 25A-I to which is transmitted the latch select pulse on the latch select pulse in the time interval.
It is a feature of this invention that the introduction of a signal at the matrix 33 results in a BCD read out from ROM 27 on the character lines 28.
It is a purpose of this invention to detect incorrect data in the password information. For examples, the password information may be correct for identification and authentication for the actuation of the operation of a controlled device. Alphanumeric reference information is stored in the equipment in binary coded decimal bits and a alphanumeric coded information is put into the equipment for detection and processing.
The apparatus and process of this invention provides means for authentication. The authentication may be establishment of the validity of the processed message or password; or it may be verifying a user's authorization for access to data. When a correct password is processed it is authenticated according to this invention by the issuance of signal. When an incorrect password is processed it is not authenticated and an appropriate signal is issued. The following description relates to the apparatus and process resulting in authentication and its signals.
The processing is carried out by means of two registers, data that is written into one register from an external source, that is the matrix 33 and data which is written into a companion register from a program of a microprocessor. An ultimate purpose is the comparison of the values as written into the registers for detection of incorrect data in the externally introduced data or the authentication of correct data in a password.
The data written into the equipment from the external source is processed through an input/output. The externally introduced data is in binary character form in the I/O unit having been suitably introduced from the cryptograph described above.
FIG. 5 illustrates a detection apparatus in accordance with the invention. In FIG. 5 the cryptograph described above is identified by X. The apparatus is supplied with current from a low voltage source. The input data is introduced in binary character form from the ROM 27 of cryptograph X into an input/output 35 over character lines 100.
The operation begins with initializing the display and a clock 36 switching on the input/output 35 and a CPU 37 over lines 38 and 39 respectively. The matrix 33 and its associated circuits provide data. The CPU 37 is ready to start reading process data coming from the input/output 35.
The CPU 37 is looking for a character or a matrix coefficient. It looks for the matrix coefficient by looking for a change of character at a certain position at a certain time interval in the display cycle. The CPU 37 determines whether the input from the cryptograph X equal the character from the EPROM 40. There is equality when the binary coded decimals are equal and this results in authentication. The authentication in the described embodiment is of a password for access, as for example, verifying a user's authorization for access to data or other tests of identity appropriate to authentication. More specifically, in the presently described embodiment, the authentication is of the content of the code.
The CPU microprocessor 37 is then under the control of the program in the EPROM 40. Thus the operations of comparison and access control are performed under the instructions carried out pursuant to this program in EPROM 40. By way of explanation, the instructions for processing data consist of three cycles each. These can be characterized as the first cycle or fetch signal, sent on the address line 43 to the EPROM 40, which is followed by the read cycle in which are read and fed back thru line 42 for decoding in the CPU 37 followed by the third cycle of decoding in CPU 37 to lead to performance of the specific operation.
The instructed operation is performed in the microprocessor and the procedure of three cycles is repeated for each instructed operation.
As mentioned above, the purpose of the operations is to determine when the externally input data has provided the proper addressing of the information to authorize the access. This authorization occurs unit-by-unit.
In further explanation of the described embodiment, in the communication with the access system instituted by the externally input data, the first step is communication with the input/output 35 from the character buss 28. This sets the operation mode and the register sets which will be used as the above-mentioned register.
The sequence then provides a time delay referred to as halt and the timing by the clock 36 of the interrupt as referred to above. This halt and interrupt sequence occurs with each introduced binary coded characters from the ROM 27 on the BUS 28. As several symbols are used to make up the particular password, the initiating of the operating mode, the halt, interrupt, and restart will be repeated for each of the several cycles.
After the restart in each repeated symbol process an ARDY pin in the input/output 35 is set to signal readings for the input of the externally introduced data into the register A of the CPU 37 over line 41 for transmission. Reading the input causes the ARDY pin 45 to go high or positive and whatever binary coded data is in the input/output 35 is moved into the A register of the CPU 37.
After the data is moved to the CPU 37, the ASTB pin 44 goes low, the ARDY pin 45 goes low and the input/output is ready for reception of more character data.
By way of further detailed explanation of the procedure at the ROM 27 the character is introduced in binary code.
The binary coded data of the symbol is introduced at the A port of CPU 37 and an instruction indicates that the character data is waiting at the input for the A register of the CPU 37. A low for a short interval (2 microseconds) and the character data is taken into the input/output 35. Then the procedure described above again takes place for this succeeding character, in that the input/output 35 responds by loading this binary coded data onto the input of the CPU 37.
The CPU 37 then reacts and reads the data from the input/output 35 into the CPU 37 A register. Then the programmed instruction loads the reference integers from the EPROM 40 which is the relevant value into the B register of the CPU 37.
Thus the A register content is whatever was introduced externally from the ROM 27.
The B register has the content of the value loaded by the program from the EPROM 40. The value is loaded by the three cycles described above.
After the values are entered a comparison of the values is made by subtraction. The binary subtraction results in a binary 0, if a match of values is indicated the system goes to halt and is in condition for receipt of the next entry from the keyboard with its interrupt. This is a step in the authentication of the password.
On the other hand, if the match in values results in a setting to decimal 1 of the flag register in the CPU 37, an alarm signal is sent on line 46 to an alarm 47. Thus, if the numbers are equal a 0 is set in the Z register, if no 0 then at 1 set in the Z register. This is the inverse of authentication.
It is the purpose of this invention to deliver from the cryptograph X to the A register alphanumeric characters as 8-digit binary coded decimals and by this delivery to the A register effect a comparison values by the match of values described above and toward authentication as an end result. At the same time the operation of the cryptograph X includes a display of characters which simultaneously disguises the proper code and participates in the operation of the accessing procedure. Not only does the present invention provide a match of values for letters and integers but also of matrix coefficients. The coefficient is matched by having a position in the EPROM 40 which is the coordinate position of the binary coded decimal within the password string.
In description of this aspect of the present invention particular reference is made FIGS. 6, 7 and 8.
FIG. 6 shows a table which illustrates the matrix 33 of the keyboard. This matrix 33 is made up of three rows and three columns providing nine array positions, as
Row 1--positions A1, A2, and A3; Row 2 positions B1, B2 and B3; and Row 3 positions C1, C2 and C3. The operations which produce lighted LED's in these nine array positions are described above.
It will be understood that the characters are transmitted to the A register in the form of these binary coded decimals. The object of the system is to submit in the respective actuation of the sequence of actuations a proper symbol to the A register. The rationale of the procedure being that the proper symbol will result in a match of values which promotes the accessing procedure and finally after authenticating the introduced binary coded data authorizes access.
The password combines both alphanumeric characters and matrix coefficients as elements of the password. It is a feature of the present invention that the externally input data provided to the input/output 35 for a match of values in register A is composed both of binary coded decimals representing a particular alphanumeric character in a given actuation interval, but also a matrix coefficient resulting from an actuation at a particular array position. It can be seen that this combination of symbols provides a tremendous number of combinations of the elements to comprise the password on a single system.
For example, part of a relatively short access code may consist of four elements in four successive actuations and selected from all three categories, namely in the following sequence.
Thus whatever numeral or letter the access program provides in the second actuation is meaningless as the password data consists of the matrix coefficient in that step. However, to the contrary in the third and fourth actuation steps, it is character, not the matrix coefficient that constitutes the character data.
Each of the actuations produces nine characters displayed on the matrix 33. Each of these characters represents an alphanumeric character defined by bits. At the same time the actuation puts into the I/0 the true access code data, if the accessor has operated the proper button 10A-I. This data may be a BCD representing an alphanumeric character as illustrated in FIG. 7 or a BCD from a particular array position. For a specified use there is stored in the CPU the expected data. The data is transmitted in bits forming the BCD's.
FIG. 7 is a table illustrating the relationships in the respective actuation steps in the operation of the four element access code referred to above.
Leftmost column--the four sequential actuation steps
Next leftmost column--the data of the proper code required to be delivered to Register A.
Next column--the lighted LED displaying the authenticating data of the proper code.
Rightmost column--the 8-digit binary coded decimals
As another example, consider a two password system such that the first is P(1)=K11, E J K22 P C K13 G and P(2)=L 7A K22 U Y K13 F.
The initial display presented to the keyboard matrix is:
(L C G) AS OBSERVED THE "K11" element is (A H O) a part of both passwords. This indicates (T Y I) to the microprocessor that as long as the character "L" is received, either of the two passwords may be valid. The user now depresses the button over the "L" and the microprocessor receives an "L". Since this is both a valid character and entity the display is changed to: (R N O) At this point a differentiation between (7 6 5) the two passwords can be made (Z E I)
The operational sequence of the process is illustrated by the flow sheet in FIG. 8. The initiation of the operation, as represented by oval 50, is effected by actuating the button 32. This is an actuation of the keyboard. Characters are read from EPROM 27, and appear in the described embodiment on the LEDs 30A-I. This is a function indicated diagrammatically in FIG. 8 by block 51. The circuitry is now prepared for the entry of the password to identify the user. The first symbol of the password is entered as represented in the flow chart of FIG. 8 by parallelogram 52.
This actuation of the appropriate matrix coefficient and/or character by the user leads to the determination by the CPU 37 whether the actuation of characters or coefficient on the matrix at a specified time interval in the display cycle is the appropriate actuation in that display cycle. This decision point is represented by the diamond 53. The determination is made by procedures described herein relative to the operation of the CPU 37 loading the integers into the A and B registers and the carrying out the 3 cycles.
The negative branch of diamond 53 carries the process to notification of an unsuccessful log-in attempt represented by the block 55 and the actuation of a signal, such as an alarm. This function is represented by the block 54. The negative branch also carries the process back to the initial display on the matrix 33 as represented by block 51.
The affirmative branch of diamond 53 carries the process to the block 55. The character displayed on the LEDs 30A-I of matrix 33 are changed by characters read from EPROM 27 as represented by block 55.
The program now proceeds to determining whether the authenticated password symbol is the last number of the password string. This is represented by the diamond 56. The negative branch carries the program back to entering the next symbol. The affirmative branch carries the program to actuating access represented by the oval 57. It will be seen that the result of this operation is an authentication either by establishing the validity of the introduced password or by verifying a user's authorization for access.
The following is a narrative example of how a program could be made so as to differentiate among stored passwords and select the correct one composed of symbols made up of characters and matrix coefficients.
The length of the password is symbolized by the integer "N". The process begins with the first symbol generated by the BUTTONS 10A-I.
The difference between an alphanumeric character and a matrix coefficient is that the latter is the matrix position of the indicia and associated button, the location of which is in the EPROM.
A particular configuration consisting of both numeric and alpha characters are displayed on the display matrix. A character is selected by depressing the appropriate button 10A-I, represented by circle 64 in FIG. 9A. This sends a byte which is the first character. The corresponding matrix coefficient is known by programming in the EPROM. Because of the programming of the EPROM, the reception of the given character also indicates the matrix position of that symbol in the particular display. Referring to FIG. 9A, this is what takes place in 65 and 66 in the diagram. The memory is then searched for the appearance of the indicated matrix coefficient in 67. In 68 the outcome of the search is examined. If no such symbol is found, a search for a character equal to the one received is conducted in 83. If no such character is found at 84, the alarm is sounded, as in 85. If a character is found then that entire password is loaded into a register as indicated by 86. The length of the password is checked in 87. If the length is correct the device is activated as indicated in block 88.
If the length is not correct then "N" is incremented by one. Going back to 68, if a symbol equal to the one received from the matrix 33 was found then that particular password is loaded into a particular register, as in 69. The memory is now searched for a character equal to the first input from the keyboard, as in 70. If no other is found in decision block 71 the length is checked at 73. If the length is not the correct one it is incremented by one, as in 74.
Referring to FIG. 9B the central processing unit (CPU) 37 now waits for the second character from the keyboard as in 75. The reception of a character makes it possible to find the associated symbol as in 76. The found passwords are searched in 77 for the one in which the second symbol is equal to the input from the matrix. If one such password is found at 78 then the found passwords are searched for one whose second character equals the one from the matrix 33, as in 79. If one such password is found at 80 then the length of the password is checked at 81. If no such password is found at 80 the length is still checked at 81. If the length is correct then the device is activated at 82. If the length is not the correct one then the length is incremented at 74 and the CUP will wait at 75 for the next character.
Returning to 78, if no appropriate matrix symbol is found at 77, then the passwords are checked for the second character as in 89. If no such password is found at 84 then the alarm is activated at 91. If the search is successful at 89, then the other passwords are deleted at 93, and the length is checked at 94. If the length is correct then the device is activated. If the length is not correct at 94 or if only one password is found at 92 the length "N" is incremented at 74 and the CPU will wait at 75 for the next input from the matrix 33.
In a modification of the present invention illustrated in FIGS. 11 to 14 the time elapsed in the operating steps is controlled. Measurable and finite periods of time are provided during the establishment of the validity of an access code to effect a delay in the occurrence and issuance of signals or in other of the operating steps. Thus there is provided in the security apparatus the combination of operations for the identification of a preselected code of characters and the issuance of signals with a delay means which provides a variation in the timing of the operations and the issuance of the signals.
FIG. 11 illustrates a modification of the apparatus shown in FIG. 5. In this modification the alarm signal is sent on line 146 to the alarm 47. A delay circuit 110 is connected across line 146 to control the delivery of the alarm signal. According to this invention the delay circuit is programmable to provide adjustments in the period of delay. A suitable programmable circuit is described below.
FIG. 12 is a simplified schematic drawing illustrating the adaptation of the modification into the circuitry illustrated in FIGS. 10A and 10B. A delay means 120 is connected into a line 122 between a timing circuit 118 and the input of a pulse forming circuit 111. A positive pulse from timer 118 is inverted at NAND gate 121 and the negative pulse is processed in the programmed delay means 120 which then issues a positive pulse enabling to circuit 111 which then produces enabling pulses, as set forth above in the description of circuit 11, which is a counterpart of circuit 111. The delay means 120 is programmable to provide an adjustable period of delay in triggering the enabling pulse from circuit 111. Also it provides a means for actuating a test of status or condition of subjects, such as an entrance door.
FIG. 13 is a flow chart detailing the operation of the system with delay steps. In this embodiment the negative branch of the decision diamond 53, similarly shown in FIG. 8 is connected to another decision diamond 160 with the decision, is the alarm signal delayed. The affirmative branch from diamond 160 connects to delay means 161, whereas the negative branch from diamond 160 connects directly to alarm 54 similarly shown in FIG. 8.
The affirmative branch from the decision diamond 53 is connected to another decision diamond 162 with the decision is the display change to be further delayed. This refers to a decision whether to proceed on the signal from delay timing 18 as shown FIG. 1 or to institute processing with a further delay. The affirmative branch is connected to delay means 163, which in turn is connected to change display 55. The negative branch from diamond 162 is connected directly to change display 55.
Thus the step of authenticating a processed binary coded decimal is controlled with means for providing a measurable and variable delay in the authentication.
FIG. 14 illustrates a specific system for a delay means in the apparatus of this invention.
A delay multiplexer circuit 130 is constituted as follows. A multivibrator 131 configured in the A-stable mode is connected by line 132 to a stage 133 of NAND gates, which gates function to turn on and off at clock pulses from the A-stable multivibrator 131 and select whether a count on a counter 134 is to increase or decrease. The counter 134 is an up-down binary coded decimal counter to which the NAND gates stage 133 is connected at X and Y. A 74154 4-to-16 multiplexer 135 is connected to the counter 134 by lines 136a, 136b, 136c, and 136d.
Power, for example 5 volts, is applied at Z and the circuit is placed in operation as follows. A low is provided at line 170 from an exclusive OR gate 153. Line 170 is connected to the 14 pin of the counter 134 and this brings the pin 14 to a low and clears the chip and couples
the zero over to pins A.sub.o -D.sub.o. A pulse on line 171 form the delay timing circuit starts the counting. Bringing Pin 11 of 134 low loads a binary coded decimal 0000 into output pins A.sub.o, B.sub.o, C.sub.o and D.sub.o of counter 134 while bringing the borrow pin high. This causes the zero pin 138 of multiplexer 135 to go to a low state. The 15 pin 139 of the multiplexer 135 then assumes a high state.
Line 140 connects pin 138 to the base of PNP transistor 141 through resistor 142. With pin 138 in a low state the transistor 141 draws current and a relay 143 is energized to close relay contacts 144a, 144b, 144c, and 144d and the binary coded decimal 0000 is placed on input pins A.sub.i, B.sub.i, C.sub.i and D.sub.i of counter 134.
The A-stable multivibrator 131 produces a continuous wave of square waves at line 132 but these square wave pulses are not passed through line 145 to pin 138 because of a low on line 146 which places the gate stage 133 in a blocking condition.
A 7476 dual "JK" level triggered flip-flop 147 is connected by line 148 to pin 139 and line 145 to pin 138. Pin 139 being high line 148 places the set and input pins of flip-flop 147 on a high. While pin 138 being low, line 145 places a low on the clear pin of flip-flop 147. This forces the Q output to a low and Q output to a high. In this condition the NAND gate stage 133 configures the counter 134 for an up count. Bringing Pin 11 of 134 low places line 146 in a high condition and a train of square wave pulses pass to W in the gate stage 133. As a result a positive pulse at X initiates up counting. Position changes from a low to a high. This removes the 0000 binary coded decimal from A.sub.o, B.sub.o, C.sub.o, and D.sub.o output pins and places a 1111 decimal on these pins.
As clocking in the multivibrator 131 continues pin 139 goes from a high to a low. This in turn is transferred on line 148 to the clock pin and to the set pin of flip-flop 147 and the Q output changes from a low to a high. The NAND gate stage 133 is now in condition for a down count. The clear pin of the flip-flop 147 becomes high. It will be understood that the flip-flop 147 can be toggled.
With pin 139 changing from a high to a low line 146 changes from a high to a low. This changes the state of the gates in the NAND gate stage 133 and the passage of the train of square wave pulses is inhibited at W and the counting ceases. Bringing Pin 11 low places line 146 at high again and the resultant high at the down pin (Y) of counter 134 initiates counting down. Accordingly pin 139 changes from low to high. While this transition places a high on line 148 clocking of the flip-flop 147 does not occur because the transition is from a low to high.
Flip-flop 147 produces a train of square waves which are counted by flip-flop 152 and produce a binary coded decimal which is compared with a reference count A.sub.j, B.sub.j, C.sub.j, D.sub.j by exclusive or gate 153. If the count equals the reference then the output of 153 input A0000 to A.sub.o, B.sub.o, C.sub.o, D.sub.o and the delay is ended. The exclusive or gate 153 also produces a positive pulse to 111 the start stop partial sum stage.
Counter 134 is a decade up/down counter 74192 which is a divide by ten having a carry and a borrow and is presettable and synchronous and counts in either direction. The counter advances or declines on a ground to positive transition.
Flip-flop 147 is a dual JK level triggered flip-flop with preset and preclear. Clocking occurs only when the level changes from a high to a low.
Multiplexer 135 is used to provide one low out of sixteen data distributions. The selected pin goes low and all the other pins remain high. The binary coded decimal is converted to a pin position by keeping the selected pin low and making all the other pins high.
Another modification of the present invention is the application of signals from the multiplexer 135 to initiate a telephonic communication. In this embodiment, the change of potentials in the 1-to-16 multiplexer 135 can be used to signal a telephone circuit such as illustrated in FIG. 15. Referring first to FIG. 14 the multiplexer 135 has pin positions 0 to 15. Pin 138 is the 0 pin and pin 139 is the 15 pin. These pins of multiplexer 135 are connectible with transistors 151 in FIG. 15. These transistors 151 function as telephone switches. The pulses from the multiplexer 135 cause selected transistors 151 to conduct and thus dial a selected telephone number in accordance with the selection of the transistors 151. This results in a convential processing of signals in the automative telephone dialer system 155 as illustrated in FIG. 15. This embodiment of FIG. 15 is another specific application of the use of the multiplexer to scan to ascertain the status of conditions or to initiate ancillary functions.
The advantages provided by the ability to introduce a measurable and variable delay includes providing a delay in authentication at certain times of the day, or under special circumstances, but not at other periods. Also a system can be programmed so that selected persons when seeking access are not subjected to delay in effecting the authentication. It will be understood that the authentication can be effected both quickly and also slowly in view of the present invention.
Further as pointed out above in the description of the operation of multiplexer 135 certain concurrent functions in harmony with the authentication can be performed during the delay period. One such specific concurrent function is the signaling of telephonic communication to a predetermined location. Other such joint functions allied to the security process are included in the advantages of the presently described advance.
Claims
What is claimed is:
1. A security apparatus for identification of a preselected code of characters by a predetermined cryptograph of symbols. comprising in combination a plurality of latches, a predetermined program of a preselected code of symbols consisting of alphanumeric characters in binary coded decimals and matrix coefficient in a first memory having potential levels at addresses, selectively operable switches, means for providing pulses to said addresses in said first memory upon the operation of a switch, means for transmitting the potential levels of said binary coded decimals from said first memory to said plurality of latches, means for storing said binary coded decimals in said latches whereby each transmitted binary coded decimal is stored in a latch, means upon said operation of said switch for generating a pulse to a delay timing circuit, means for transmitting a delayed signal from said delay timing circuit to produce a timed sequence of signals selected to be transmitted to said selected latches subsequent to the storage of the binary coded decimals in said latches, means for transmitting the stored binary decimals in each of said latches to a decoding circuit and to a sending circuit, means for decoding the stored binary coded decimals in the decoding circuit to read out the potential levels to segments of a light emitting diode, means electrically connecting one of said selectively operable switches to said sending circuit for providing a signal to said sending circuit upon operation of said switch. means for depositing the binary coded decimal from said sending circuit on an electrical connection to a microprocessor upon transmission of said signal from said switch, said microprocessor having a second memory accessed by the microprocessor, said microprocessor being operative for executing a program stored in said second memory, means for storing in said second memory at least one access code of a preselected code of symbols consisting of at least one alpha-numeric character and at least one matrix coefficient, operative to sequentially enter to said microprocessor pulses defining said actuated code of symbols, said microprocessor having means for comparing the binary coded decimal produced by the operation of the sending circuit with the stored access code, and delay means included in said apparatus for delaying the operation of one or more of said means.
2. A security apparatus as claimed in claim 1 wherein said sending circuit comprises a buffer circuit.
3. A security apparatus as claimed in claim 1 wherein said selectively operable switches comprises keys of a keyboard.
4. A security apparatus as claimed in claim 1 wherein the combination includes means for conducting a concurrent operation during a delay provided by said delay means.
5. A security apparatus as claimed in claim 1 wherein the combination includes means for providing a signal when the submitted binary coded decimal is not equal the stored access code.
6. A security apparatus for identification of a preselected code of characters by a predetermined cryptograph of symbols comprising in combination a matrix consisting of an arrangement of a plurality of locations having selectively operable manual switches and variable visible indicia associated with said switches, said indicia operative to display letters and numerals at said locations, said switches being sequentially actuatable with a sequence of values representing a preselected code of symbols consisting of alphanumeric characters and matrix coefficients, a matrix coefficient consisting of a value represented by a visible indicia at a selected location at a selected sequence in said preselected code, a first memory containing a configuration of alphanumeric characters and matrix coefficients for display on said variable visible indicia a predetermined program of a preselected code of symbols consisting of alphanumeric characters in binary coded decimals and matrix coefficient in said first memory having potential levels at addresses, (a) said microprocessor having a second memory accessed by the microprocessor, said microprocessor being operative for executing a program stored in said second memory, means for storing in said second memory at least one access code of a preselected code of symbols consisting of at least one alphanumeric character and at least one matrix coefficient, operative to sequentially enter to said microprocessor pulses defining said actuated code of symbols, said microprocessor having means for comparing the binary coded decimal produced by the operation of the sending circuit with the stored access code, and delay circuit means in said apparatus for delaying the identification of said preselected code of characters.
7. A security apparatus as claimed in claim 6 including means for providing a signal when the transmitted binary coded decimal is not equal the stored access code.
8. A method of identifying a predetermined cryptograph of symbols comprising the steps of providing a predetermined program of a preselected code of symbols consisting of alphanumeric characters in binary coded decimals and matrix coefficient in a first memory having potential levels at addresses, providing selectively operable switches, providing pulses from said switches to said addresses in said first memory, transmitting the potential levels of said binary coded decimals from said first memory to a plurality of latches, to provide potential levels in selected latches, means for providing pulses to said addresses in said first memory upon the operation of a switch means for transmitting the potential levels of said binary coded decimals from said first memory to said plurality of latches, means for storing said binary coded decimals in said latches whereby each transmitted binary coded decimal is stored in a latch, means upon operation of said switch for generating a pulse to a delay timing circuit, means for transmitting a delayed signal from said delay timing circuit to produce a timed sequence of signals selected to be transmitted to said selected latches subsequent to the storage of the binary coded decimals in said latches, transmitting the stored binary decimals in each of said latches to a decoding circuit and to a sending circuit, means associated with said first memory for displaying on said variable visible indicia upon actuation of said switches of a plurality of said symbols including at least one alphanumeric character and at least one matrix coefficient in said actuated code of symbols, means electrically connecting one of said manual switches to said sending circuit for providing a signal to said sending circuit upon operation of said manual switch, means for depositing the binary coded decimal from said sending circuit on an electrical connection to a microprocessor upon transmission of said signal from said manual switch, storing said binary coded decimals in said latches whereby each transmitted binary coded decimal is stored in a latch, generating a pulse to a delay timing circuit upon the operation of a switch, transmitting a delayed signal from said delay timing circuit to produce a timed sequence of signals selected to be transmitted to said selected latches subsequent to the storage of the binary coded decimals in said latches, transmitting the stored binary coded decimals in each of said latches to a decoding circuit and to a circuit for sending the binary coded decimals to a microprocessor, decoding the stored binary coded decimals in the decoding circuit to read out the potential levels to segments of a light emitting diode, operating one of the switches to electrically connect said switch to said sending circuit for transmitting a signal to said sending circuit upon operation of said switch, depositing the binary coded decimal stored in said sending circuit on an electrical connection to a microprocessor upon transmission of said signal from said switch, operating said microprocessor operative for executing a program stored in a second memory, storing in said second memory at least one access code of a preselected code of symbols consisting of at least one alphanumeric character and at least one matrix coefficient, sequentially entering to said microprocessor pulses defining said actuated code of symbols, comparing in the microprocessor the binary coded decimal produced by the operation of the sending circuit, and providing a delay in the operation of one or more of said steps.
9. The method of identification as claimed in claim 8 wherein said sending circuit is a buffer circuit.
10. The method of identification as claimed in claim 8 wherein said switches comprise keys of a keyboard.
11. In the method of identification as claimed in claim 8, providing a signal when the transmitted binary coded decimal is not equal the stored access code.