TRANSACTION VERIFICATION PROTOCOL FOR SMART CARDS

• US 20080183607A1
• Filed: 12/18/2007
• Published: 07/31/2008
• Est. Priority Date: 01/31/1996
• Status: Active Grant

• Current Assignee: Certicom Corporation (Blackberry Limited)
• Original Assignee: Certicom Corporation (Blackberry Limited)
• Inventors: Vanstone, Scott A.
• Granted Patent: US 9,640,012 B2
• Time in Patent Office: Days
• US Class Current: 705/35
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

A protocol appropriate for smartcard purchase applications such as those that might be completed between a terminal or ATM and a users personal card is disclosed The protocol provides a signature scheme which allows the card to authenticate the terminal without unnecessary signature verification which is an computationally intense operation for the smart card. The only signature verification required is that of the terminal identification (as signed by the certifying authority, or CA, which is essential to any such protocol). In the preferred embodiment, the protocol provides the card and terminal from fraudulent attacks from impostor devices, either a card or terminal.

Claims

1. A method of performing a transaction between a first and second participant wherein said second participant permits a service to be provided to said first participant in exchange for a payment, said method comprising the steps of:

a) said first participant verifying the legitimacy of the second participant to obtain assurance that the service will be provided upon payment;

b) said second participant verifying the legitimacy of said first participant to obtain assurance that payment will be secured upon provision of the service; and

c) said second participant obtaining a digital signature for said first participant on said transaction whereby said second participant may obtain payment from a third participant.