PIN Servicing

• US 20100313027A1
• Filed: 02/19/2007
• Published: 12/09/2010
• Est. Priority Date: 02/23/2006
• Status: Active Grant

• Current Assignee: Barclays Execution Services Ltd. (Barclays PLC)
• Original Assignee: Barclays Bank PLC (Barclays PLC)
• Inventors: Taylor, David
• Granted Patent: US 10,528,940 B2
• Time in Patent Office: Days
• US Class Current: 713/172
• CPC Class Codes: G06F 21/77 in smart cards
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/355 Personalisation of cards for use
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00

Abstract

A smart card (1) interfaces with a smart card reader (2) to generate an authentication message (PSRQ), which is sent to a PIN servicing centre (5, 6). If the authentication message (PSRQ) is validated by the PIN servicing centre (5, 6), a validation response message (PSRS) is sent back to the user (3). The user (3) enters the validation response message (PSRS) on the reader (2), which authenticates the validation response message (PSRS) with the smart card (1); the PIN servicing function may then be performed. The smart card cryptographic messages are generated internally and solely by the smart card (1)—the reader (2) acts merely as an input mechanism into the smart card (1) or as an output mechanism from the smart card (1) to the display (10). The reader (2), therefore, does not need to contain any customer information or be personalised by the card issuer.

Claims

1. A method of performing a PIN service for a smart card, comprising:

a. initiating a PIN service request;

b. generating an authentication message corresponding to the PIN service request;

c. sending the authentication message to a PIN servicing facility;

d. receiving from the PIN servicing facility a response message to the authentication message;

e. validating the response message and, in response to successful validation,

f. performing the PIN service for the smart card.

2. The method of claim 1, wherein the authentication message comprises a one time cryptogram.

3. The method of claim 2, wherein the one time cryptogram is generated by the smart card.

4. The method of claim 1, wherein the PIN service request selects one of a plurality of possible PIN services, and the authentication message is a function of the selected PIN service.

5. The method of claim 1, wherein step c includes transmitting to the PIN service facility user identification information identifying an authorized user of the card.

6. The method of claim 1, wherein step e comprises validating the response message against the authentication message.

7. The method of claim 1, wherein the PIN service request selects one of a plurality of possible PIN service functions, and step e comprises validating the response message against the PIN service request.

8. The method of claim 1, wherein step e is performed by the smart card.

9. The method of claim 8, wherein step e includes providing the response message to the smart card by means of a smart card reader connected to the smart card.

10. The method of claim 1, wherein step f further includes displaying a PIN service message indicating successful validation.

11. The method of claim 10, wherein the PIN service is a PIN display function and the PIN service message indicates the value of the reference PIN.

12. The method of claim 10, wherein step f is performed by a smart card reader connected to the smart card.

13. The method of claim 1, wherein step b is performed by the smart card.

14. The method of claim 1, wherein step a is performed by a smart card reader connected to the smart card.

15. A smart card reader arranged to implement step a in the method of claim 1.

16. A smart card reader arranged to implement step f in the method of claim 1.

17. A smart card arranged to implement step a of claim 1.

18. A smart card arranged to implement step b of claim 1.

19. A smart card arranged to implement step e of claim 1.

20. A smart card arranged to implement step f of claim 1.

21. The method of claim 1, further comprising, at the PIN servicing facility, between steps c and d, validating the authentication message and generating the response message in response to successful validation of the authentication message.

22. The method of claim 21, wherein the authentication message includes a component that varies between PIN service requests for the smart card according to a predetermined relationship, and the authentication message is validated against the predetermined relationship.

23. A system for performing a PIN service function, comprising:

a. a smart card having a reference PIN

b. a reader connectable to the smart card for initiating a PIN service request and displaying an authentication message corresponding to the PIN service request; and

c. means for sending the authentication message to a PIN servicing facility and for receiving from the PIN servicing facility a response message to the authentication message;

the reader being arranged to validate the response message and, in response to successful validation, to perform the PIN service function, when connected to the smart card.

24. The system of claim 23, including said PIN servicing facility arranged to validate the authentication message and to generate the response message in response to successful validation of the authentication message.