Method and apparatus for secure message transmission for use in electronic funds transfer systems

• US 4,302,810 A
• Filed: 12/28/1979
• Issued: 11/24/1981
• Est. Priority Date: 12/28/1979
• Status: Expired due to Term

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Stuckert, Paul E., Bouricius, Willard G.
• Primary Examiner(s): Springborn, Harvey E.
• Application Number:
  US06/108,071
• Time in Patent Office: 697 Days
• Field of Search: 235/379-381, 340/149 A, 364/200 MS File, 364/900 MS File
• US Class Current: 705/75
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/0855 involving a third party
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/14 specially adapted for billing systems
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G07F 7/0886 the card reader being portable for interacting with a POS or ECR in realizing a payment transaction
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/3273 for mutual authentication network architectures or network communication protocols for achieving mutual authentication in a packet data network H04L63/0869

Abstract

An electronic funds transfer system wherein it is required that a bank be reasonably guaranteed that the two parties to a retail transaction (i.e., a person and a retailer) agree on the transaction before the funds transfer takes place. The message including the transaction information is encrypted by the person using a unique encryption key (K_P) stored in a highly secure storage location in his own personal portable transaction device (XATR) and his data storage and transfer card (DSTC) and this first encrypted message is sent to the retailer who doubly encrypts the initially received encrypted message from P under his own unique encryption key (K_R) and this doubly encrypted message is sent to the bank. The person also sends the transaction message to the retailer in clear, and the retailer first verifies the message and then, utilizing his own encryption key (K_R), encrypts same and similarly sends it to the bank. The bank utilizing unique retailer and customer identification data sent with the message, accesses a "key" file and first extracts the retailer'"'"'s key (K_R) and decrypts a first portion of the message, extracts the person'"'"'s key (K_P) and decrypts a second portion of the received message. The bank then compares a predetermined portion of the transaction message originating with the person with a similar portion received from the retailer and if identical, the appropriate funds transfer is made. If the messages do not agree, a predetermined default procedure is initiated.

Claims

1. A method for effecting the secure transmission to a Host machine or system (H) of a transaction message (TM) which describes a financial transaction between a Person (P) and a Retailer (R) in an Electronic Funds Transfer (EFT) environment, said method comprising the Person (P) and the Retailer (R) agreeing on at least a predetermined portion of the contents of the transaction message (TM) which is to be sent to a Host (H) where the Electronic Funds Transfer is to be effected, separately encrypting the message (TM) under the two respective secret encryption keys K_P and K_R to form messages (TM, K_P) and (TM, K_R), communicating the message (TM, K_P) to R, R further encrypting same under the key K_R to form a doubly encrypted message ((TM, K_P), K_R), transmitting the complete message [((TM, K_P), K_R,)+(TM, K_R)] to H, H accessing the two private keys K_P and K_R from its own secret files and decrypting the message received from R to recover the two originally encrypted transaction messages (TM), H then comparing portions of the two separately decrypted transaction messages (TM) for identity and if identical, completing the transaction.

2. A secure message transmission method as set forth in claim 1 including P and R separately constructing predetermined portions of said transaction original message (TM) prior to encryption and comparing said separately constructed portions for identity.

3. A secure message transmission method as set forth in claim 1 including R first constructing the predetermined portion of said transaction message (TM) and then commuting same to P, P displaying and examining same and if satisfactory encrypting the approved TM under his encryption key K_P, P then forwarding the so encrypted message (TM, K_P) to R, and R further encrypting same under his key K_R and forwarding same to H.

4. A secure message transmission method as set forth in claim 3 including P transferring the message TM to R in the clear after approval of same, and R encrypting same under his key K_R to form the message segment (TM, K_R) to form part of said transmission message being forwarded to H.

5. A secure message transmission method as set forth in claim 1 including R inserting a time value in the predetermined portion of said transmission message indicating the time of day and the date and H, upon receiving the transmission from R, checking the time of day and date to make certain it agrees with his own clock value within predetermined limits before approving said transaction message.

6. A method for the secure transmission of messages in Electronic Funds Transfer systems wherein it is required that a Host (H) be reasonably guaranteed that a Person (P) and a Retailer (R) agree on the transaction before the funds transfer takes place, said method comprising P encrypting first, his version, of a predetermined portion of a transaction message (TM) using a unique encryption key (K_P) stored in a secure storage location in his own Personal portable terminal equipment, to form an encrypted message (TM, K_P), P transferring said predetermined portion of the encrypted message to R'"'"'s terminal, R who further encrypting the message received from P under his own key K_R to form the doubly encrypted message ((TM, K_P), K_R) and transmitting same to H, R substantially concurrently also encrypting his version of the predetermined portion of said transaction message TM under his key K_R to form the message (TM, K_R) and transmitting same to H, H upon receipt of said two transmissions from R first accessing the two unique encryption keys of P and R, K_P and K_R, H decrypting both said singly encrypted and doubly encrypted messages and comparing the two versions of the predetermined portions of the transaction message TM for identity and if equal, accepting the transaction for entry.

7. A secure message transmission method as set forth in claim 6 including R transmitting identification data for P to H in singly encrypted form under his key K_R and his own identification data, and H utilizing this identification data to sequentially access the two keys K_R and K_P from a secure storage location.

8. A secure message transmission method as set forth in claim 7 including the step of R transmitting all of said messages to H encrypted under a transmission key K_T in addition to the aforementioned encryptions and H upon receipt of messages from R first decrypting said messages under said transmission key K_T.

9. A secure message transmission method for use in an Electronic Funds Transfer system wherein a Host entity (H) must be assured that a Person (P) and a Retailer (R) agree on the details of an Electronic Funds Transfer (EFT) transaction that is to be performed by H, said method comprising, P and R agreeing on and cooperatively forming a common transaction message (TM) with a portable transaction terminal unit in the possession and under complete control of P and with a point of sale terminal under the control of R, said agreed transaction message including time and data information to be utilized in subsequent validation operations, both P and R storing their own respective copies of said agreed upon transaction message in their own terminal equipment, P encrypting said common transaction message (TM) under his Personal encryption key K_P to form a singly encrypted message, (TM, K_p) and transferring same to R, R further encrypting said received message under his key K_R to form a doubly encrypted message ((TM, K_P), K_R)) and transmitting same to the Host, as a first message segment, P next transmitting the common transaction message of TM to R in the clear, R comparing said common transaction message of TM to R with the previously agreed upon transaction message stored in his terminal and if there is agreement R encrypting the common message of TM under his key K_R to form a second message segment (TM, K_R) and R transmitting this message segment to H, R also sending to H together with said first and second message segments a third message segment containing P'"'"'s identification data singly encrypted under R'"'"'s key K_R and R'"'"'s identification number in the clear, H, upon receipt of said three message segments first accessing K_R using R'"'"'s identification number, and then decrypting the message segment containing P'"'"'s identification number utilizing the accessed key K_R, accessing P'"'"'s encryption key K_P using P'"'"'s identification number, decrypting the singly encrypted message (TM, K_P) and the doubly encrypted message ((TM, K_P), K_R) using said two keys K_R and K_P respectively and comparing the two common transaction message portions of TM contained in said two message segments and, if equal, approving said transaction.

10. A secure message transmission apparatus for use in an electronic funds transfer system wherein it is required that a Host (H) be reasonably guaranteed that a Person (P) and a Retailer (R) agree on the transaction details before the funds transfer takes place, said apparatus comprising in combination:

a terminal under control of R including;

a keyboard for entering transaction data by R, a display for visually observing and checking data entered, secure storage means for storing part of all of a unique encryption key K_R, a key-controlled block-cipher encryption unit operable under the key K_R for encrypting transaction messages to be sent to H, clock means for inserting time and date data into the transaction message and means for transmitting R'"'"'s identification number to H,

a portable transaction terminal device uniquely under the control of P, adaptable for interfacing with R'"'"'s terminal in a data exchange relationship, said device including;

display means for displaying predetermined transaction message data to be sent to H, keyboard means for selectively entering data and commands into the device, storage means for storing account data unique to P, secure storage means for storing P'"'"'s unique encryption key K_P, and a key-controlled block-cipher cryptographic unit identical to or compatible with that in R'"'"'s terminal for encrypting transaction data under control of said stored key K_P, a Host computer (H'"'"'s CPU) connected to R'"'"'s terminal adapted to receive encrypted messages therefrom, H'"'"'s CPU including a key-controlled block-cipher cryptographic unit identical to or compatible with those in R'"'"'s terminal and P'"'"'s portable terminal device for decrypting messages received from R, secure storage means for storing the unique encryption keys K_X '"'"'s of all Retailers (R) using the system and of all the Persons (P) using the system, means to access specific encryption keys from said secure storage means utilizing special identification data transmitted to H from R together with the transaction message,

said combination further including control means in P'"'"'s and R'"'"'s terminals for entering common transaction message data and for displaying same on the display means in both terminals for approval by P and R and, if satisfactory, means in R'"'"'s terminal for encrypting said common transaction data message under R'"'"'s encryption key K_R and sending same to H, control means in P'"'"'s terminal device for first encrypting said common transaction data message under P'"'"'s encryption K_P to form a message (TM, K_P) and transmitting same to R, and means in R'"'"'s terminal for further encrypting the singly encrypted message from P to form a message ((T_M, K_P) K_R) and sending same to H, means in R'"'"'s terminal for transmitting to H both P'"'"'s and R'"'"'s identification data, means in H'"'"'s CPU for extracting the two keys, K_P and K_R from the secure storage means, utilizing the two identification data received from R, and first decrypting the two transaction messages received from R, encrypted under the key K_R and next decrypting that portion of the transaction message which was additionally encrypted under the key K_P and comparing the common portions of the transaction messages for identity, and if identical performing the requested transaction.

11. An electronic funds transfer system as set forth in claim 10 wherein the data and control lines between R'"'"'s terminal and P'"'"'s portable terminal device prevent P'"'"'s unique encryption key K_P from even being readable from P'"'"'s terminal device and control means in P'"'"'s device whereby only transaction data first approved by P may be encrypted by P'"'"'s encryption unit.

12. An electronic funds transfer system as set forth in claim 11 wherein P'"'"'s Personal portable terminal device includes a first unit, including a display means, a keyboard means for entering both data and commands, arithmetic and logic circuitry and required storage registers for performing predetermined arithmetic operations on data entered into said device, and a second unit physically associatable with said first unit in data exchange relationship therewith comprising a data storage and transfer card containing storage means for storing Personal data unique to P including account information, P'"'"'s account identification number, and part or all of P'"'"'s unique encryption key K_P.