Three-legacy mode payment card with parametric authentication and data input elements

• US 20040177045A1
• Filed: 03/15/2004
• Published: 09/09/2004
• Est. Priority Date: 04/17/2001
• Status: Abandoned Application

• Current Assignee: Qsecure Inc.
• Original Assignee: Qsecure Inc.
• Inventors: Brown, Kerry Dennis
• Application Number:
  US10/800,821
• Publication Number:
  US 20040177045A1
• Time in Patent Office: Days
• US Class Current: 705/65
• CPC Class Codes: G06K 19/07 with integrated circuit chips
• CPC Class Codes: G06K 19/07354 by biometrically sensitive means, e.g. fingerprint sensitive fingerprint sensors in general G06V40/12; biometrically activated access control G07C9/25
• CPC Class Codes: G06K 19/07769 the further communication means being a galvanic interface, e.g. hybrid or mixed smart cards having a contact and a non-contact interface
• CPC Class Codes: G06K 19/08 using markings of different kinds or more than one marking of the same kind in the same record carrier, e.g. one marking being sensed by optical and the other by magnetic means
• CPC Class Codes: G06K 19/145 at least one of the further markings being adapted for galvanic or wireless sensing, e.g. an RFID tag with both a wireless and an optical interface or memory, or a contact type smart card with ISO 7816 contacts and an optical interface or memory
• CPC Class Codes: G06Q 20/3572 Multiple accounts on card
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence
• CPC Class Codes: G07C 9/26 using a biometric sensor integrated in the pass
• CPC Class Codes: G07F 7/10 together with a coded signal , e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data

Abstract

A payment card comprises a plastic card and operates with three different legacy payment systems. A magnetic stripe with user account data allows card use in traditional point-of-sale magnetic card readers. A dual-input crypto-processor embedded in the card provides for contact/contactless smart card operation. A user input provides for user authentication by the crypto-processor. Internal to the plastic card, and behind the magnetic stripe, a magnetic array includes a number of fixed-position magnetic write heads that allow the user account data to be automatically modified by the crypto-processor.

Claims

1. A payment card, comprising:

a user-sensor for accepting a user input;

a processor connected to the user-sensor and providing for user authentication;

a contact interface connected to the processor and providing for communication with a contact-type smartcard reader;

a wireless interface connected to the processor and providing for communication with a contactless-type smartcard reader;

a stripe of magnetic material having a longitudinal length, and a front side and a back side, and able to store electronic data as a magnetic recording comprising a plurality of bits;

a magnetic write head permanently positioned on said back side of the stripe at a particular data bit of one of said plurality of bits, and providing for electronic-magnetic alteration of a data bit magnetically readable on said front side;

a magnetic recording serially accessible to a longitudinally moving read head on said front side of the stripe that includes said data bit affected by the magnetic write head; and

a plastic card in which all the other elements are disposed.

2. The payment card of claim 1, wherein:

the user-sensor includes a keypad for user entry of a password.

3. The payment card of claim 1, wherein:

the user-sensor includes a biometric sensor for collecting a physical characteristic of the user.

4. The payment card of claim 1, wherein:

the user-sensor includes a biometric sensor for collecting at least one of a signature or a fingerprint of the user and such is used by the processor to authenticate the user.

5. The payment card of claim 1, wherein:

the processor includes a secure dual-interface smartcard integrated circuit.

6. The payment card of claim 1, wherein:

the processor includes a programmable interface controller (PIC) connected to a contact interface of a secure dual-interface smartcard integrated circuit.

7. The payment card of claim 6, wherein:

the PIC does not store more than one digit of a user password being entered before sending it on to said contact interface of said secure dual-interface smartcard integrated circuit.

8. The payment card of claim 6, wherein:

the PIC does not store a whole user password entered one digit at a time.

9. The payment card of claim 1, further comprising:

a financial account number of a user encoded within the magnetic recording; and

a controller connected to the magnetic write head and providing for a subsequent obfuscation of the financial account number by re-recording of said data bit.

10. The payment card of claim 1, further comprising:

a usage-counter record encoded within the magnetic recording; and

a controller connected to the magnetic write head and providing for a subsequent incrementing of the usage-counter record by re-recording said data bit.

11. The payment card of claim 10, further comprising:

detectors connected to signal the controller when a reading of data in the magnetic recording has occurred.

12. The payment card of claim 1, further comprising:

a piezoelectric generator connected to power the processor.

13. The payment card of claim 1, further comprising:

a piezoelectric generator connected to charge a battery that powers the processor.

14. A method for operating a payment card, comprising:

providing a programmable magnetic array on a payment card; and

presenting valid data to said magnetic array for a limited time.

15. A method for operating a payment card, comprising:

providing a smartcard contact interface, a wireless smartcard contactless interface, and a programmable magnetic array on a single payment card; and

presenting valid data to said magnetic array for a limited time.

16. A method for operating a payment card, comprising:

providing a smartcard contact interface, a wireless smartcard contactless interface, and a programmable magnetic array on a single payment card;

requiring a user to enter a password on said single payment card; and

presenting valid data to said magnetic array for a limited time if the user is authenticated.

17. A method for operating a payment card, comprising:

providing a smartcard contact interface, a wireless smartcard contactless interface, and a programmable magnetic array on a single payment card;

requiring a user to enter a biometric on said single payment card; and

presenting valid user account data to a corresponding card reader for a limited time if the user is authenticated.

18. A method for a transaction process, comprising:

embedding an algorithm that encodes unique user data in a cryptoprocessor;

requesting a new unique transaction encoding to be issued by using said cryptoprocessor to process said algorithm and to generate a data suited to a card-acceptance system pre-processing requirements; and

using a conventional transaction infrastructure and server to derive from said number said unique user data.

19. The method of claim 18, further comprising:

communicating said new unique transaction encoding to said conventional transaction infrastructure and server by a smart card contact or proximity connection.

20. The method of claim 18, further comprising:

communicating said new unique transaction encoding to said conventional transaction infrastructure and server by a reprogrammable magnetic stripe on a card read by a reader.