Trusted system

• US 20020023032A1
• Filed: 08/17/2001
• Published: 02/21/2002
• Est. Priority Date: 08/18/2000
• Status: Active Grant

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Company (HP Inc.)
• Inventors: Chen, Liqun, Pearson, Siani Lynne
• Granted Patent: US 7,275,160 B2
• Time in Patent Office: Days
• US Class Current: 705/35
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/4097 using mutual authentication between devices and transaction partners
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: G07F 7/005 Details or accessories
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

A method for allowing a financial transaction to be performed using a electronic system, the method comprising interrogating an electronic transaction terminal with an electronic security device to obtain an integrity metric for the electronic financial transaction terminal; determining if the transaction terminal is a trusted terminal based upon the integrity metric; allowing financial transaction data to be input into the transaction terminal if the transaction terminal is identified as a trusted terminal.

Claims

1. A method for allowing a financial transaction to be performed using a electronic system, the method comprising interrogating an electronic transaction terminal with an electronic security device to obtain an integrity metric for the electronic financial transaction terminal;

determining if the transaction terminal is a trusted terminal based upon the integrity metric;

allowing financial transaction data to be input into the transaction terminal if the transaction terminal is identified as a trusted terminal.

2. A method according to claim 1, further comprising the providing of user identification data for the user of the electronic security data to the transaction terminal via the security device to allow authorisation of the transaction associated with the financial transaction data.

3. A method according to claim 1, further comprising displaying a user secret if the transaction terminal is identified as a trusted terminal.

4. A method according to claim 1, further comprising compartmenting of different types of transactions into different compartments.

5. A financial transaction system comprising an electronic financial terminal;

an electronic security device having interrogation means for interrogating the electronic financial transaction terminal to obtain an integrity metric for the electronic financial transaction terminal, determining means for determining if the transaction terminal is a trusted terminal based upon the integrity metric, means for allowing financial transaction data to be input into the transaction terminal if the transaction terminal is identified as a trusted terminal.

6. A financial transaction system according to claim 5, wherein the electronic financial transaction terminal further comprises a display for displaying a user secret if the transaction terminal is identified as a trusted terminal.

7. A financial transaction system according to claim 6, wherein the user secret is deleted on completion of the financial transaction.

8. An electronic security transaction device having interrogation means for interrogating an electronic financial transaction terminal to obtain an integrity metric for the electronic financial transaction terminal, determining means for determining if the transaction terminal is a trusted terminal based upon the integrity metric, means for allowing financial transaction data to be input into the transaction terminal if the transaction terminal is identified as a trusted terminal.

9. An electronic security transaction device according to claim 8, further comprising a switch for initiating the transfer of financial transaction data to the transaction terminal if the transaction terminal is identified as a trusted terminal.

10. An electronic security transaction device according to claim 8, wherein the transaction device is a wireless trusted personnel device.