Security system for electronic funds transfer system

• US 4,259,720 A
• Filed: 01/09/1978
• Issued: 03/31/1981
• Est. Priority Date: 01/09/1978
• Status: Expired due to Term

• Current Assignee: Interbank Card Association (MasterCard Incorporated)
• Original Assignee: Interbank Card Association (MasterCard Incorporated)
• Inventors: Campbell, Carl M.
• Primary Examiner(s): Nusbaum, Mark E.
• Application Number:
  US05/867,924
• Time in Patent Office: 1,177 Days
• Field of Search: 364/200 MS File, 364/900 MS File, 178/22, 340/149 R, 340/152 R, 375/2
• US Class Current: 705/71
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083

Abstract

A security system, particularly useful in an electronic funds transfer system, makes use of secret identification codes known only to system users. The codes are encrypted upon insertion into the system and are stored in a data processing unit in encrypted form. A security module is used to decrypt the code entered by a user and compare it to the corresponding encrypted code stored in the data processing unit.

Claims

1. In a system, including at least two data processing units, for automatically performing banking functions in response to transaction requests, originated at a banking terminal by a banking customer, said banking terminal associated with a first one of said data processing units, apparatus for verifying the identity of said customer comprising:

means, at said terminal operated by said customer, for receiving a scret customer code and for encrypting said code to form an encrypted message portion;

means at said terminal for receiving transaction information and for forming a transaction message portion;

means for transmitting said encrypted message portion and said transaction message portion from said terminal to said first data processing unit;

means at said first data processing unit for interpreting said transaction message portion and for providing a first control signal if said customer has an account maintained by said data processing unit and for providing a second control signal if said customer has an account maintained by a second data processing unit in said system;

a memory associated with said first data processing unit for storing encrypted customer codes, and including means for selecting an encrypted customer code from said memory in response to said first control signal in accordance with said transaction message portion;

and decrypting means connected to said first data processing unit and receiving said encrypted message portion and said selected customer code from said first data processing unit, and responsive to said first control signals for decrypting said encrypted message portion, and including means for comparing said decrypted message portion to said selected customer code, and

said decrypting means further including means, responsive to said second control signals, for decrypting said encrypted message portion and re-encrypting said encrypted message portion for transmission with said transaction message portion to said data processing unit.

2. Apparatus as specified in claim 1 wherein said means for encrypting said code is operable in response to said secret code and to said transaction message portion thereby to form an encrypted message portion which is encrypted with at least portions of said transaction message portion, whereby said transaction message portions are verified by the successful decrypting and comparison of said secret code.

3. Apparatus as specified in claim 1 wherein said system includes a plurality of said terminals, wherein said encrypting means at each terminal makes use of a first encrypting key unique to that terminal, wherein said decrypting means incudes a memory for storing said first encrypting keys and means for selecting oen of said first encrypting keys in accordance with the terminal at which a message originated.

4. Apparatus as specified in claim 3 wherein said first encrypting keys are stored in said memory inencrypted form and wherein said decrypting means includes means for decrypting said keys.

5. Apparatus as specified in claim 4 wherein said decrypting and re-encrypting means includes a memory for storing re-encrypting keys.