Conditional suppression of card holder verification

• US 20010003842A1
• Filed: 12/07/2000
• Published: 06/14/2001
• Est. Priority Date: 12/11/1999
• Status: Active Grant

• Current Assignee: PayPal, Inc. (PayPal Holdings, Inc.)
• Original Assignee: International Business Machines Corporation
• Inventors: Schaeck, Thomas, Wasmund, Michael
• Granted Patent: US 7,979,705 B2
• Time in Patent Office: Days
• US Class Current: 713/169
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 20/4097 using mutual authentication between devices and transaction partners
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1025 Identification of user by a PIN code

Abstract

The present invention relates to method and system for comfortably operating chipcard applications in a chipcard application system.

It is proposed to define at least one trusted terminal device (12) in a trusted environment for a Chipcard (10) in use with which the card holder verification (CHV) dialogue is suppressed and the CHV operation is performed in the system hidden from the user. Either, the trusted terminal ID is stored on the chip of the chipcard, or, the Chipcard ID (22) is stored on a trusted terminal together with the PIN (Personal Identification Number) of the card holder. Such an association can help to suppress the CHV dialogue in a trusted environment.

Claims

1. A method for operating chipcard applications in a chipcard application system comprising at least one chipcard and at least one terminal, the system being provided with card holder verification means comprising in turn at least a PIN and a chipcard ID, the method comprising:

checking the presence of an initial trusted association between at least one preferred terminal and said chipcard; and

subsequently running the remainder of the chipcard application program in case that said trusted association is present.

2. The method according to

claim 1

in which said checking the presence of said trusted association comprises comparing the chipcard-Id stored on the chipcard with one or more chipcard-Ids stored in the terminal.

3. The method according to

claim 1

in which said checking the presence of said trusted association comprises comparing the Terminal ID of the terminal with one or more terminal Ids stored on the Chipcard.

4. The method according to

claim 1

further comprising controlling the presence of said initial association by controlling means which are provided via a network the terminal or the chipcard is connectable to.

5. The method according to

claim 2

in which said initial association is stored in storage means of said terminal and comprises an association between at least one preferred terminal and a plurality of chipcards.

6. The method according to

claim 2

in which a PIN is checked hidden from the chipcard user.

7. The method according to

claim 3

in which a PIN is checked hidden from the chipcard user.

8. The method according to

claim 2

in which the presence of the trusted association is the only criterion for entering the remainder of the chipcard application program.

9. The method according to

claim 3

in which the presence of the trusted association is the only criterion for entering the remainder of the chipcard application program.

10. A terminal device having storing means for storing its terminal-ID and at least one pair of matching chipcard-ID and PIN and logic circuit means for performing the steps of the method according to

claim 1

.

11. Computer program comprising code portions adapted for performing the steps according to the method according to

claim 1

when said program is loaded into a computer device.

12. Computer program product stored on a computer usable medium comprising computer readable program means for causing a computer to perform the method of

claim 1

.

13. A terminal device having storage means for storing its terminal-ID and making it accessible by a chipcard-resident application program.

14. A chipcard usable for interaction with the terminal device according to

claim 13

, the chipcard having means for storing its chipcard-ID, at least one terminal-ID and a PIN.

15. A chipcard according to

claim 14

, further having logic circuit means for performing:

checking the presence of an initial trusted association between at least one preferred terminal and said chipcard; and

subsequently running the remainder of the chipcard application program in case that said trusted association is present.