Authorization means security module terminal system

• US 20050103839A1
• Filed: 11/18/2004
• Published: 05/19/2005
• Est. Priority Date: 05/31/2002
• Status: Active Grant

• Current Assignee: Infineon Technologies AG
• Original Assignee: Infineon Technologies AG
• Inventors: Hewel, Karl-Harald
• Granted Patent: US 7,295,832 B2
• Time in Patent Office: Days
• US Class Current: 235/380
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/4097 using mutual authentication between devices and transaction partners
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

An identification information transmission pathway is separated from a system side to be performed by a mobile authorization means of an owner of a security module in a wireless way. To this end, the security module comprises two interfaces, i.e. one for a communication with a terminal and a further one for wirelessly communicating with the mobile authorization means. The mobile authorization means supplies identification information to the security module for an authentication examination at its part, either stored in the authorization means in a memory or otherwise generated there, like e.g. via biometric sensors, via a keyboard or the like. The security module, performing the examination of the identification information, like e.g. preferably via a zero knowledge method or a zero knowledge protocol, respectively, only then indicates a request for an action at the terminal, like e.g. of a money transfer, when the examination is successful.

Claims

1. A mobile authorizer for an authorizer security module terminal system having a terminal, the authorizer, and a security module, which is a chip card, the authorizer comprising:

a provider for providing identification information; and

an interface for wirelessly communicating with the security module,

wherein the mobile authorizer is physically separated from the security module and the terminal,

the provider comprising;

an input device for inputting information by a user upon a query request from the security module; and

an encryptor for performing an encryption based on information inputted to receive the identification information.

2. The mobile authorizer according to claim 1, wherein the input device for inputting information is selected from a group consisting of a keyboard and a sensor for detecting biometric characteristics.

3. The mobile authorizer according to claim 1, wherein the provider is adjusted to provide the identification information according to a zero knowledge method.

4. The mobile authorizer according to claim 1, further comprising a provider for providing operational energy for the mobile authorizer.

5. The mobile authorizer according to claim 4, wherein the provider for providing operational energy is selected from a group consisting of a battery, an accumulator, a photocell and a converter for converting electromagnetic energy from the security module into electrical energy.

6. The mobile authorizer according to claim 1, further comprising:

a transmitter for transmitting electromagnetic energy to the security module.

7. The mobile authorizer according to claim 1, further comprising:

an output unit for outputting output information concerning a communication between the security module and the mobile authorizer and/or a communication between the terminal and the security module.

8. The mobile authorizer according to claim 1, further comprising:

an encryptor/decryptor for encrypting/decrypting the communication with the security module via the interface for wirelessly communicating.

9. A system, comprising:

a terminal;

a security module, the security module being a chip card; and

a mobile authorizer;

the mobile authorizer comprising;

a provider for providing identification information; and

an interface for wirelessly communicating with the security module;

the security module comprising;

an interface for communicating with the terminal;

an interface for wirelessly communicating with the mobile authorizer;

an examiner for examining the identification information of the mobile authorizer; and

a requester for requesting an action at the terminal, wherein the requestor for requesting an action is controllable to perform a request depending on whether the examination is successful,

the terminal comprising;

an interface for communicating with the security module; and

a processor for performing the action upon the request from the security module,

wherein the terminal, the security module and the mobile authorizer are physically separated from each other,

the provider comprising;

an input device for inputting information by a user upon a query request from the security module; and

an encryptor for performing an encryption based on the information inputted to receive the identification information.

10. A method for an authentication in view of a security module of an authorizer security module terminal system having the security module, a terminal, and a mobile authorizer, the security module being a chip card, the method comprising the steps of:

inputting information at the authorizer which is physically separated from the security module and the terminal, by a user upon a query request from the security module;

performing an encryption based on the information inputted, to obtain identification information, in the authorizer; and

wirelessly communicating the identification information from the authorizer to the security module.

11. A method for performing an action in an authorizer security module terminal system having a terminal, a security module, and a mobile authorizer, physically separated from each other, the security module being a chip card, the method comprising the steps of:

inputting information at the authorizer by a user upon a query request from the security module;

performing an encryption based on the information inputted, to obtain identification information, in the authorizer;

wirelessly communicating the identification information from the mobile authorizer to the security module;

examining the identification information of the mobile authorizer in the security module;

requesting an action at a terminal by the security module depending on whether the examination is successful; and

performing the action upon the request from the security module.