Identification system safeguarded against misuse

• US 4,105,156 A
• Filed: 12/16/1976
• Issued: 08/08/1978
• Est. Priority Date: 09/06/1976
• Status: Expired due to Term

• Current Assignee: Matsushita Electrinc Components Company Limited 1006 OAZA Kadoma Kadoma Osaka Japan
• Original Assignee: Jurgen Dethloff
• Inventors: Dethloff, Jurgen
• Primary Examiner(s): Kilgore, Robert M.
• Application Number:
  US05/751,035
• Time in Patent Office: 600 Days
• Field of Search: 235/487, 235/492, 235/441, 235/380, 235/492, 235/400, 235/401, 235/402, 235/403, 200/46, 250/569, 340/149 R, 340/149 A, 340/152, 360/2, 194/4 R
• US Class Current: 235/441
• CPC Class Codes: G06K 19/005 the record carrier comprising an arrangement to facilitate insertion into a holding device, e.g. an arrangement that makes the record carrier fit into an etui or a casing ticket holders A45C11/18
• CPC Class Codes: G06K 19/073 Special arrangements for circuits, e.g. for protecting identification code in memory protection against unauthorised use of computer memory G06F12/14
• CPC Class Codes: G06K 7/0021 for reading/sensing record carriers having surface contacts
• CPC Class Codes: G06K 7/006 the housing being a portable casing
• CPC Class Codes: G06K 7/0086 the connector comprising a circuit for steering the operations of the card connector
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3558 Preliminary personalisation for transfer to user
• CPC Class Codes: G07D 7/01 Testing electronic circuits therein
• CPC Class Codes: G07F 7/082 Features insuring the integrity of the data on or in the card
• CPC Class Codes: G07F 7/10 together with a coded signal , e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1083 Counting of PIN attempts
• CPC Class Codes: Y10S 257/922 with means to prevent inspection of or tampering with an integrated circuit, e.g. "smart card", anti-tamper
• CPC Class Codes: Y10S 283/904 Credit card

Abstract

An identification card with interior circuits, including memory means, for use in a credit or identification system, into which the user enters a "secret" number and then the input gate to that part of the memory means is destroyed for security purposes.

Claims

1. In a system, secured against misuse and counterfeiting, for effecting transactions, such as manual or mechanical delivery of commodities, services and money while using identificands, such as credit cards, check cards, cards for automatic machines, coded tokens, keys and the like, provided with identification data, processing data, or both which are readable visually, by a machine, or both, and while using a personal identifying designation, such as a personal identification number (PIN), for verifying the entitlement of the user of the identificand:

the improvement comprising, in combination, an identificand having inaccessibly and integrally incorporated therein memories for entry and storage of information therein, including a personal identifying designation;

at least the memory for entry and storage of the personal identifying designation being chargeable only once, and at least the contents of the memory for the personal identifying designation being available only within the identificand;

verifying means operable to receive said identificand and apply an input thereto;

components included in said identificand and activated, responsive to an input from said verifying means, to effect checking of the identity and entitlement of a user of said identificand; and

input-output means included in said identificand for establishing communication between said identificand and said verifying means;

said identificand including means preventing external access to said memories except through said input-output means when in communication with said verifying means.

2. In a system secured against misuse and counterfeiting, the improvement claimed in claim 1, in which said identificand comprises a processing unit controlling and actuating the storage and processing operations.

3. In a system secured against misuse and counterfeiting, the improvement claimed in claim 2, in which said processing unit comprises a microprocesser controlling and actuating the storage and processing operations.

4. In a system secured against misuse and counterfeiting, the improvement claimed in claim 2, in which said processing unit comprises an electronic control device in which the programs are contained in hard-wired logic.

5. In a system secured against misuse and counterfeiting, the improvement claimed in claim 2, including gates interposed between said processing unit and said memories capable of being automatically destroyed after the allocated data have been entered into said memories for the first time.

6. In a system secured against misuse and counterfeiting, the improvement claimed in claim 1, in which daid personal identifying designation is a personal identification number which can be optional for the entitled owner of the identificand and which can be entered into the memory for entry and storage of the personal identifying designation;

said memories including a memory for entry and storage of the identification data and a memory for entry and storage of the conditions of use of the identificand.

7. In a system secured against misuse and counterfeiting, the improvement claimed in claim 2, in which a protective code, in the form of a random number, is entered, during manufacture of the identificand, into a first memory which is chargeable only once and is available only within the identificand, on the one hand, and also, on the other hand, as a readable number into a concealed information carrier;

the identificand and the concealed information carrier are separately handled prior to delivery of the identificand to a user;

the protective code is read from the concealed information carrier and entered into the identificand wherein it is compared internally with the stored protective code for identity; and

, responsive to a positive result of such comparison, a release signal is produced by the processing unit for further processing of the identificand;

after which a personal identifying designation, is entered into a second mamory of the identificand.

8. In a system secured against misuse and counterfeiting, the improvement claimed in claim 1, including a read-in gate and a read-out gate interposed between said first memory and said processing unit, and capable of being automatically destroyed following the initial read-in operation and initial read-out operation, respectively.

9. In a system secured against misuse and counterfeiting, the improvement claimed in claim 7, in which said identificand comprises a plurality of sets of said memories for entry and storage of information therein, including a personal identifying designation and securing data;

said plurality of said sets of said memories being connected to said processing unit thereby making possible successive re-uses of said identificand by entering thereinto further protective codes and use information data.

10. In a system secured against misuse and counterfeiting, the improvement claimed in claim 2, in which said memories are incorporated in a single integrated circuit with said processing unit.

11. In a system secured against misuse and counterfeiting, the improvement claimed in claim 2, in which said memories are incorporated in respective integrated circuits additional to an integrated circuit containing said processing unit.

12. In a system secured against misuse and counterfeiting, the improvement claimed in claim 2, in which the geometric dimensions of the control electronics, including all the memories and said processing unit, have a predetermined maximum magnitude;

said verifying means, upon insertion of an identificand thereinto, checking whether, outside the admissible area defined by these maximum geometric dimensions, there are connections for transmitting signals into or out of said admissible area.

13. In a system secured against misuse and counterfeiting, the improvement claimed in claim 12, in which, responsive to the presence of said connections, said verifying means releases a signal disabling said control electronics.

14. In a system secured against misuse and counterfeiting, the improvement claimed in claim 12, in which, responsive to the presence of said connections, said verifying means releases a signal interrupting further checking operation of said verifying means.

15. In a system secured against misuse and counterfeiting, the improvement claimed in claim 1, in which said verifying means is an automatic machine including a reader into which the identificand is introduced;

and screening means interposed between the identificand, in its inserted position, and the environment of said reader, screening the identificand against conduction-independent connections including electromagnetic and mechanical waves.

16. In a system secured against misuse and counterfeiting, the improvement claimed in claim 1, in which said verifying means is an automatic machine including a reader into which the identificand is inserted;

and a mechanical closing device included in said machine and operable, responsive to insertion of an identificand into said reader, to interrupt any connections leading from the identificand to the exterior.

17. In a system secured against misuse and counterfeiting, the improvement claimed in claim 1, including protective coatings protecting the components within said identificand against external wave energy.

18. In a system secured against misuse and counterfeiting, the improvement claimed in claim 1, in which the components within said identificand are destroyed responsive to opening of the identificand or peeling of layers thereof.

19. In a system secured against misuse and counterfeiting, the improvement claimed in claim 1, in which, responsive to non-observance of predetermined checking criteria during use of the identificand, the components within said identificand are automatically made inoperable.

20. In a system secured against misuse and counterfeiting, the improvement claimed in claim 1, in which, upon non-observance of checking criteria during use of the identificand, the components within said identificand deliver a signal to said verifying means.

21. In a system secured against misuse and counterfeiting, the improvement claimed in claim 20, in which said verifying means, responsive to the delivery of said signal thereto from said identificand, prevents further functioning of the components within said identificand.

22. For use in a system secured against misuse and counterfeiting, an identificand having inaccessibly and integrally incorporated therein memories for entry and storage of information therein, including a personal identifying designation;

at least the memory for entry and storage of the personal identifying designation being chargeable only once, and at least the contents of the memory for the personal identifying designation being available only within the identificand;

components included in said identificand and activated, responsive to an input to said identificand, to effect checking of the identity and entitlement of a user of said identificand; and

input-output means included in said identificand for establishing communication between said identificand and a verifying means;

said identificand including means preventing external access to said memories except through said input-output means when in communication with a verifying means.

23. An identificand, as claimed in claim 22, further comprising a processing unit controlling and actuating the storage and processing operations.

24. An identificand, as claimed in claim 23, including gates interposed between said processing unit and said memories capable of being automatically destroyed after the allocated data have been entered into said memories for the first time.

25. An identificand, as claimed in claim 22, in which said personal identifying designation is a personal identification number which can be optional for the entitled owner of the identificand and which can be entered into the memory for entry and storage of the personal identifying designation;

said memories including a memory for entry and storage of the identification data and a memory for entry and storage of the conditions of use of the identificand.

26. An identificand, as claimed in claim 23, in which a protective code, in the form of a random number, is entered, during manufacturing of the identificand, into a first memory which is chargeable only once and is available only within the identificand, on the one hand, and also, on the other hand, as a readable number into a concealed information carrier;

the identificand and the concealed information carrier are separately handled prior to delivery of the identificand to a user;

the protective code is read from the concealed information carrier and entered into the identificand wherein it is compared internally with the stored protective code for identity; and

, responsive to a positive result of such comparison, a release signal is produced by the processing unit for further processing of the identificand;

after which a personal identifying designation is entered into a second memory of the identificand.

27. An identificand, as claimed in claim 26, comprising a plurality of sets of said memories for entry and storage of information therein, including a personal identifying designation and securing data;

said plurality of said sets of memories being connected to said processing unit thereby making possible successive reuses of said identificand by entering thereinto further protective codes and use information data.