Contactless Optical User ID via Wired Network Without Local Data Storage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing smart card readers require a previously-issued smart card for access, are inflexible for one-time visitors, and pose security risks due to data storage on the device, while optical readers lack widespread use in secure access applications and require significant bandwidth.
Innovation Solution
A contactless optical user identification device with an optical code capture and translation circuit, connected via a wired network, uses volatile memory for operational instructions and PoE for power, ensuring secure data transmission and preventing data compromise.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If smart card readers store access control information on the scanning device itself, then access control functionality is enabled, but security risk increases if the device is stolen or removed
Solution Approach 1:
The patent extracts the sensitive access control information from the local device memory and stores it remotely on a server. The optical scanner only retains minimal operational data, while user credentials and access permissions are maintained externally, eliminating the security vulnerability of storing sensitive data on portable devices.
Solution Approach 2:
The patent introduces a server as an intermediary between the optical scanner and the access control database. The server acts as a secure mediator that handles authentication and data storage, allowing the scanner to function without directly storing sensitive information locally.
2Ease of operation
If optical readers capture images for user identification, then identification capability is provided, but bandwidth consumption increases due to image size
Solution Approach 1:
The patent extracts only the essential identification data from the captured image and transmits only this extracted information to the server. Instead of transmitting entire images, the system processes images locally to extract identification features, significantly reducing the data volume that needs to be transmitted over the network.
3Reliability
If smart card readers require previously-issued smart cards, then secure access is maintained, but flexibility for one-time visitors is reduced
Solution Approach 1:
The patent creates a universal system that can handle multiple types of access scenarios through a single optical scanning interface. The system can process both permanent employee credentials and temporary visitor codes through the same device, eliminating the need for separate hardware for different user types while maintaining security through centralized validation.
4Adaptability or versatility
If optical readers are used for secure access applications, then flexibility is improved, but widespread adoption is limited due to security concerns and bandwidth requirements
Solution Approach 1:
The patent segments the identification system into two distinct components: local image capture and processing, and remote data validation. The optical scanner handles only the capture and initial processing of identification images, while all security-critical operations and data storage are performed remotely on secure servers, combining the flexibility of optical scanning with the security of centralized control.
Data Source
AI summary
A contactless optical device is useable to identify a user, and allows an enterprise to authorize access by that user to enterprise facilities and/or cause presentation of user information of the user. The device is specifically adapted for secure usage within an enterprise network via a wired network interface. The device avoids storage of user-identifying data in persistent memory, to avoid compromise of user data if the device were lost or stolen, or otherwise removed from the enterprise network.