SYSTEM, METHOD, AND APPARATUS FOR SMART CARD PIN MANAGEMENT VIA AN UNCONNECTED READER

• US 20100308109A1
• Filed: 06/05/2009
• Published: 12/09/2010
• Est. Priority Date: 06/05/2009
• Status: Active Grant

• Current Assignee: Entrust Corp.
• Original Assignee: Dynamic Solutions International, LLC
• Inventors: Maddocks, Ian
• Granted Patent: US 8,186,586 B2
• Time in Patent Office: Days
• US Class Current: 235/382.5
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/352 Contactless payments by cards
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1025 Identification of user by a PIN code

Abstract

A system of changing the PIN associated with a smart card is described. A user can initiate the PIN change using a personal unwired smart card reader, rather than using a system, such as an ATM machine. The smart card reader, loaded with the smart card provides a cryptogram code, which can contain the user'"'"'s requested new PIN or it can be provided to the issuer via alternative methods. Via various methods the cryptogram code is delivered to the card issuer'"'"'s PIN change management system, including the user transposing the code from smart card reader screen to the card issuer'"'"'s web site or audio DTMF transmission from the smart card reader speaker to the card issuer IVR system. Returned from the issuer, via a similar path, will be a command code that when processed by the smart card reader will result in a PIN change on the smart card.

Claims

1. A personal identification number (PIN) management system operable to change the PIN for a smart card associated with a user, the PIN management system comprising:

a network interface, the network interface in communication with a user computer, the network interface operable to receive a PIN change request from the user computer, the network interface operable to send a PIN command to the user computer;

a message engine in communication with the network interface, the message engine operable to interpret the PIN change request, the message engine operable to generate the PIN command; and

a PIN engine in communication with the message engine, the PIN engine operable to receive PIN change information from the interpreted PIN change request, the PIN engine operable to change the PIN and communicate the new PIN to the message engine to generate the PIN command.

2. The PIN management system as defined in claim 1, further comprising an authentication module in communication with the network interface, the authentication engine operable to authenticate a user associated with the user computer.

3. The PIN management system as defined in claim 2, wherein the authentication engine authenticates the user with user data stored in a user database.

4. The PIN management system as defined in claim 3, wherein the authentication engine compares the user data stored in the user database with user data from the PIN change request.

5. The PIN management system as defined in claim 1, further comprising an encryption module in communication with the network interface, the encryption module operable to decrypt the PIN change request received from the user computer.

6. The PIN management system as defined in claim 1, wherein the PIN change request includes a first cryptogram requesting a PIN change request from the user computer, wherein the first cryptogram is generated by a smart card reader in communication with a smart card associated with the PIN.

7. The PIN management system as defined in claim 6, wherein the message engine creates a second cryptogram for the PIN change command that directs a smart card reader in communication with a smart card associated to change a PIN associated with the smart card.

8. The PIN management system as defined in claim 7, wherein the smart card reader comprises:

a computer interface in communication with the user computer, the computer interface operable to send the PIN change request to the user computer to send to the PIN management system, the computer interface operable to receive the PIN change command from the user computer;

a second message creator in communication with the computer interface, the second message creator operable to generate the first cryptogram requesting the PIN change request and operable to interpret the second cryptogram commanding the PIN change; and

a second PIN engine in communication with the second message creator, the second PIN engine operable to receive the PIN change command and operable to send a command to the smart card associated with the PIN to change the PIN.

9. A method for changing a PIN associated with a smart card, the method comprising:

a user computer receiving a request to change a PIN associated with a smart card;

the user computer receiving a new PIN;

the user computer communicating the PIN change request to a smart card reader with the new PIN;

the smart card reader acquiring information from the smart card;

the smart card reader creating a first message based, at least in part, from the information acquired from the smart card and the new PIN;

the smart card reader sending the first message to the user computer;

the user computer sending the first message to a PIN management system over a network;

in response to sending the first message, the user computer receiving a second message;

the user computer sending the second message to the smart card reader; and

the smart card reader commanding the smart card to change the PIN based, at least in part, on information in the second message.

10. The method as defined in claim 9, wherein at least a portion of the first message is a cryptogram requesting a change in the PIN.

11. The method as defined in claim 10, wherein the first message includes at least one of an old PIN, a new PIN, an action, a card identifier, or user information.

12. The method as defined in claim 11, wherein the action is a change from the old PIN to the new PIN.

13. The method as defined in claim 9, further comprising encrypting the first message before sending the first message to the user computer.

14. The method as defined in claim 9, further comprising decrypting the second message after receiving the second message from the user computer.

15. The method as defined in claim 9, wherein at least a portion of the second message is a cryptogram.

16. The method as defined in claim 10, wherein the second message includes at least one of a new PIN, an action, a user identifier, a card identifier, or user information.

17. The method as defined in claim 11, wherein the action is a command for the smart card to change from the old PIN to the new PIN.

18. A computer program stored on a computer-readable medium, the computer program embodied in one or more instructions for changing a PIN associated with a smart card, the computer program comprising:

instructions to receive a PIN change request message from a user computer, wherein a smart card reader creates the PIN change request for the user computer;

instructions to authenticate a user associated with the smart card;

instructions to change the PIN associated with the smart card;

instructions to generate a command for the smart card reader to change the PIN;

instructions to create a PIN change message including the command; and

instructions to send the PIN change message to the user computer for communication to the smart card reader.

19. The computer program as defined in claim 18, further comprising:

instructions for decrypting a first cryptogram included with the PIN change request message; and

instructions for creating a second cryptogram including the command to change the PIN.

20. The computer program as defined in claim 18, further comprising instructions to send a message to a card issuer to change the PIN in a user database associated with the card issuer.