Abstract: A method and system for generating random numbers is disclosed wherein an array of imaging sensors while not in normal use, captures ambient light and back scattered light. These light sources vary naturally over a range of intensities. Intensity values above and below a threshold value are decoded as “1” and “0” bits, respectively. The resulting values, based on noise within the array signal, are single bit values or n bit values. A preferred imaging sensor array is a charge coupled device. Other imaging sensor arrays such as capacitive fingerprint imagers may also be used for this purpose when sufficient noise exists within the imaging sensor array signal.

Abstract: An improved method of encoding data within directory files on an integrated circuit IC) smart card is shown. Advantageously the improved method no longer imposes a limitation in placing the pointer data start address prior to encoding of data, since after encoding a single continuous block of unused memory within the directory file results, enables encoding applications to make better use of this memory space thereby eliminating the deficiency of having two non-sequential empty memory blocks as provided by prior art systems.

Abstract: A method and a system for disabling execution of a software application stored within a computer absent data indicative of an authorized use of the software application are disclosed. At start up or during execution of a software application a user is prompted for user authorization information. Using a processor within a smart card the received user authorization information is compared with user authorization information stored in memory of the smart card to produce a comparison result. If the comparison result is indicative of an authorized user of the software application, then data indicative of the authorized use of the software application is provided from the smart card to the computer. Upon receipt of the data indicative of the authorized use of the software application execution of the software application is continued. When the data is not data indicative of the authorized use of the software application further execution of the software application is disabled.

Abstract: An optical imaging device such as a fingerprint imager is disclosed that has an array of micromirrors that allows sequential scanning of areas of a platen in steps. The scanned areas of the platen are transmitted to an image sensor and a composite image constructed from the scanned areas. By transmitting scanned areas of the platen in sections, the image sensor area required is reduced in contrast to prior art optical images that scan the whole platen in a single step.

Abstract: The terminal includes a terminal module (1) and a personal security device (31). The terminal module (1) is adapted to receive high-level requests from an application (Fap) installed on an electronic unit. The high-level requests are independent of the personal security device (31). The terminal module (1) and/or the personal security device (31) includes a reprogrammable memory for storing and a unit for executing a filter program (F) translating the high-level requests into at least one of either (i) at least one sequence of exchanges of data between the terminal module (1) and the user or (ii) a sequence of at least one elementary command that can be executed by the personal security device, together with a unit for protecting the filter program (F, 62) to prevent any modification of the filter program by an unauthorized entity. The filter program includes a unit for identifying and/or authenticating the source of requests sent by the application (Fap) installed in the electronic unit.

Abstract: A method of registering biometric data is disclosed wherein a registration profile is formed of those templates that have a likelihood of registering with the biometric data that is within predetermined limits. The profile is then compared against one or more other profiles to determine an individual most likely to have said profile. That individual is then identified. Optionally, the profile comparison is used in conjunction with a individual registration values formed by comparison between the biometric data and stored templates.

Abstract: A method of enhancing network security is provided for a communication session initiated between a first computer and a second other computer. From the first computer to the second computer in communications therewith a process for securing communications therebetween is transmitted. One such process is a biometric characterisation process for characterising fingerprints. The process is for execution on the second computer and is selected to be compatible therewith. Communications from the second computer to the first computer are secured using the transmitted process on the second computer and using, on the first computer, a compatible process to the transmitted process. The host computer can modify or replace the process or data particular to the process before each session, during a session, or at intervals.

Abstract: A method of providing secure user access for doorways and network computer systems is disclosed. An overall system security level is provided. A user provides biometric information that is compared against stored biometric information of each of a plurality of users to identify the individual. When the likelihood of a match is above the likelihood necessary for identification, the threshold for that user is increased. Optionally, a threshold for another user is lowered in order to maintain a same system security level. When biometric information provided to the system is consistent, the stored template is automatically updated.

Abstract: An optical imaging device such as a fingerprint imager has a prism or another light transmitting element, a light source for illuminating a finger placed on the prism, and a CCD image sensor for receiving a light beam reflected from the finger-contacted surface. A modified optical lens is used to focus and redirect the reflected light beam. The lens has a relatively small reflective coating in the middle of its back surface, the reflective coating constituting an optical iris. The modified lens is effective to partly correct for peripheral aberration, perspective distortion and depth-of-field image distortion of the device and gives rise to a compact design of the device.

Abstract: An optical imaging device such as a fingerprint imager is disclosed that has an optical modification to reduce perspective distortion in a read image. The optical modification is a contoured lens, a contoured platen recess, a contoured output port, or a contoured reflective surface that compensates for perspective distortion. The optical modification is provided by a complex optical surface and is distinct for a uniformly planar, spherical or cylindrical lens. In addition, a method for determining a perspective distortion correction is disclosed.

Abstract: This device includes data storage unit, interface unit with an external tool for loading data into the storage unit, data processing unit including initialization unit for enabling modification of a specific secret personalizing access code and loading of personalizing data into the storage unit, first loading unit controlled by the specific access code for loading into the storage unit reprogrammable particular secret personalizing access codes assigned to personalizing in the device a plurality of functions, second loading unit controlled by the particular access codes for loading into the storage unit particular personalizing data assigned to the implementation of the functions, and inhibitor unit for authorizing, for each of the functions, only in response to the application of one particular access code already assigned to the function, (i) modification of the particular access code and (ii) the loading of the particular personalizing data.

Abstract: The system includes a first card-like unit adapted to communicate with a second unit giving only conditionally access to a function. Both units are capable of running software for generating a password by means of encryption of a plurality of dynamic variables produced separately but in concert (so as to have a predetermined relationship, such as identity, with one another) in the units. The encryption is carried out in each unit by a public algorithm using a dynamically varying encryption key. Each time an access request is issued by a card user, the key is modified as a function of the number of access requests previously formulated by the card user. Access to the function is granted when the passwords generated in the units have a predetermined relationship (such as identity) with each other.

Abstract: The system includes a first unit adapted to communicate with a second unit. The second unit grants conditional access to a function or service in accordance with an authentication operation. Both units are capable of running software for generating passwords by means of encryption of several dynamic variables as for example a time dependent variable and/or a variable representing the number of formulated authentication requests. The encryption may be performed using a dynamic key. In order to synchronize the values of the variables generated in concert but independently in the units, only some of the least significant digits of the variables are transferred from the card-like unit to the other unit, with the transfer being performed by adding the digits to the password.

Abstract: The system includes a first card-like unit adapted to communicate with a second unit giving only conditionally access to a function. Both units are capable of running software for generating a password by means of encryption of a plurality of dynamic variables produced separately but in concert (so as to have a predetermined relationship, such as identity, with one another) in the units. The encryption is carried out in each unit by a public algorithm using a dynamically varying encryption key. Each time an access request is issued by a card user, the key is modified as a function of the number of access requests previously formulated by the card user. Access to the function is granted when the passwords generated in the units have a predetermined relationship (such as identity) with each other.

Abstract: The system includes a first card-like unit adapted to communicate with a second unit. The second unit grants conditional access to a function or service in accordance with an authentication operation. Both units are capable of running software for generating passwords by means of encryption of several dynamic variables as for example a time dependent variable and/or a variable representing the number of formulated authentication requests. The encryption may be performed using a dynamic key. In order to synchronize the values of the variables generated in concert but independently in the units, only some of the least significant digits of the variables are transferred from the card-like unit to the other unit, with the transfer being performed by adding the digits to the password.