Method to make transactions secure by means of cards having uniqe and non-reproducible identifiers

• US 20050075984A1
• Filed: 11/13/2003
• Published: 04/07/2005
• Est. Priority Date: 10/02/2003
• Status: Active Grant

• Current Assignee: Novatec Incorporated
• Original Assignee: Novatec Incorporated
• Inventors: Bourrieres, Francis, Kaiser, Clement, Bourrieres, Frank
• Granted Patent: US 7,647,279 B2
• Time in Patent Office: Days
• US Class Current: 705/64
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G07F 7/08 by coded identity card or credit card or other personal identification means without personal verification means G07F7/02
• CPC Class Codes: G07F 7/086 by passive credit-cards adapted therefor, e.g. constructive particularities to avoid counterfeiting, e.g. by inclusion of a physical or chemical security-layer for security documents G07D7/00; for the reading of record-carriers in general G06K7/00; for the design of coded credit-cards G06K19/10
• CPC Class Codes: G07F 7/12 Card verification
• CPC Class Codes: G07F 7/122 Online card verification

Abstract

A method for making transactions secure based upon a card-type medium (2) comprising a number (4) and a remote database (5) connected to a telecommunications network. A unique and non-reproducible identifier (3) in the form of a bubble code is physically affixed to the card (2) comprising a number (4) contained either on a magnetic strip, of a bar code, or in an electronic label. One representation of this identifier (6) and or (7) is stored in the remote database (5) at the same number (4) as that present on the medium. This identifier (3) constitutes an unforgeable link between the magnetic strip (1) and the database (5). When a call is made to the remote database by means of the number recorded on the card, a link authentication is performed by comparing the representation of the identifier stored in said database and the actual identifier.

Claims

1. Method for making transactions secure based on a card-type medium (2) comprising a number (4) and a remote database (5) connected to a telecommunications network (9), characterized in that

a unique and non-reproducible identifier (3) is physically integrated in the medium (2) comprising the number (4),

this identifier (3) constitutes an unforgeable link between the number (4) located on the medium and information stored under the same number (4) in the database (5),

said stored information comprises at least one representation of the identifier comprising an image (6) and/or a digital signature (7) of the unique and non-reproducible identifier (3),

the link authentication is performed by means of a comparison between a representation of the identifier (6 or 7) stored in said database (5) and the identifier (3) located on the medium (2), and

if there is agreement, the transaction is authorized.

2. Method for making transactions secure based on a card-type medium (2) comprising a number (4) and a remote database (5) connected to a telecommunications network (9) according to claim 1, characterized in that the number is recorded on the medium (2) by means of a magnetic strip or tape (1).

3. Method for making transactions secure based on a card-type medium (2) comprising a number (4) and a remote database (5) connected to a telecommunications network (9) according to claim 1, characterized in that the number is recorded in the medium (2) by means of a linear bar code or a two-dimensional code (1).

4. Method for making transactions secure based on a card-type medium (2) comprising a number (4) and a remote database (5) connected to a telecommunications network (9) according to claim 1, characterized in that the number is recorded on the medium (2) by means of an electronic chip or radio frequency chip.

5. Method for making transactions secure based on a card-type medium (2) comprising a number (4) and a remote database (5) connected to a telecommunications network (9) according to claim 1, characterized in that the unique and non-reproducible identifier (3) constituting the unforgeable link between the number (4) recorded on the medium (2) and the same number (4) recorded in the database (5) is a volume-based identifier (3) in which are contained bubbles of random size, shape, and arrangement.

6. Method for making transactions secure based on a card-type medium (2) comprising a number (4) and a remote database (5) connected to a telecommunications network (9) according to claim 1, characterized in that the authentication of the unforgeable link authorizing the transaction is performed in a visual manner by an operator (13).

7. Method according to claim 6 wherein, when an operator (13) places a call (9) to the database (5) to the number (4) recorded on the medium (2), an image (6) stored in said database (5) is sent back to the operator (13) and a visual examination is performed by comparing said image (6) appearing directly on the terminal monitor (11) or printed on the receipt of the printer (10), with the real, unique, and non-reproducible identifier (3) integrated in the medium (2) comprising the number.

8. Method for making transactions secure based on a card-type medium (2) comprising a number (4) and a remote database (5) connected to a telecommunications network (9) according to claim 1, characterized in that the authentication of the unforgeable link authorizing the transaction is performed automatically. When the operators (13) place a call (9) to the database (5) to the number (4) recorded on the medium (2), the unit (12) captures the identifier and then the image of this identifier is transmitted to the remote database (5), a computation of the signature corresponding to the image received by the database (5) is performed and compared to that (7) stored in said database. If there is agreement, authentication of the link exists and the transaction is authorized.