System and method for authorizing access to an article distribution or service acquisition machine

• US 4,450,535 A
• Filed: 09/15/1981
• Issued: 05/22/1984
• Est. Priority Date: 09/16/1980
• Status: Expired due to Term

• Current Assignee: Compagnie Internationale Pour L'Informatique Cii-Honeywell Bull
• Original Assignee: Compagnie Internationale Pour L'Informatique Cii-Honeywell Bull
• Inventors: Ugon, Michel, de Pommery, Bertrand
• Primary Examiner(s): Smith, Jerry
• Assistant Examiner(s): Watson, Mark P.
• Application Number:
  US06/302,621
• Time in Patent Office: 980 Days
• Field of Search: 364/200 MS, 364/900 MS, 364/405, 364/408, 235/379, 235/380, 235/381, 235/382, 235/487, 235/441
• US Class Current: 705/41
• CPC Class Codes: G06Q 20/105 involving programming of a portable memory device, e.g. IC cards, "electronic purses"
• CPC Class Codes: G06Q 20/206 comprising security or operator identification provisions, e.g. password entry
• CPC Class Codes: G06Q 20/229 Hierarchy of users of accounts
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G07F 7/08 by coded identity card or credit card or other personal identification means without personal verification means G07F7/02
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/12 Card verification

Abstract

A system and method for distribution of articles or services, especially adapted to be secure against use by unauthorized personel, receives first and second data carriers. Each data carrier includes a processor, data storage, and interfacing circuits. A random number generator feeds a random number to each of the data carriers which use a program to generate a resultant based on the random number, a secret code and an identification number. The secret code and identification number are stored in the data storage of each data carrier. The resultants are compared to determine if they are equal, in which case access is allowed.

Claims

1. System for authorizing the distribution of articles or services comprising:

first means for receiving first and second detachable data carriers, each data carrier having processing means, data storage means, decision-making means and interfacing circuits;

second means for processing information from the first and second detachable data carriers;

third means for providing bi-directional communication between the first and second detachable data carriers and said second means, the second detachable data carrier having means necessary for enabling said bi-directional communication between the first detachable data carrier and said second means; and

fourth means responsive to said information processed by the second means for authorizing delivery of the articles or services.

2. System according to claim 1, wherein the third means exchanges data between each detachable data carrier and the second means by a single electrical line using the variations in one signal transferred between each detachable data carrier and the second means.

3. System according to claim 2, wherein the second means and each detachable data carrier may each act alternately as a receiver and as a transmitter of data.

4. System according to claim 3, wherein the receiver signals the transmitter it is in a "ready to receive" state by positioning said line at a voltage level detectable by the transmitter.

5. System according to claim 4, wherein the receiver signals the transmitter that it has found a transmission error by positioning said line in a temporary stable state detectable by the transmitter, the temporary stable state being different from the "ready to receive" state.

6. System according to claim 3, wherein the data exchanged between a detachable data carrier and said second means is coded data.

7. System according to claim 1, wherein the second means is responsive to the information processing means on the second data carrier and to the processing of information in a predetermined sequence of steps in the second data carrier for affording access of the first data carrier to the second means.

8. System according to claim 1 or 7 further including a local printing means for printing data for a holder of the first detachable data carrier and a remote printing means for printing said data at a remote location.

9. System according to claim 1 or 7 wherein the second means further includes storage means.

10. System according to claim 9, wherein the storage means includes a read-only memory.

11. System according to claim 7, wherein the system further includes means for establishing the identification of a user of a data carrier and for authorizing access to protected areas of the data storage means of a data carrier of the user whose identification has been established by the establishing means.

12. System according to claim 11, wherein the protected areas house an information processing means.

13. System according to claim 1 or 7, wherein the fourth means distributes money or bank notes.

14. System according to claim 1 or 7, wherein the system is a point-of-scale terminal.

15. System of claim 1, wherein the processing means of the first detachable data carries produces a first resultant R₁ =P₁ (S,E, In) where P₁ is a first sequence of ordered steps performed on a random number E, a secret code S and an identification code In, P₁, S and In being stored in the data storage means of the first detachable data carrier, and the processing means of the second detachable data carrier produces a second resultant R₂ =P₂ (S,E, In) where P₂ is a second sequence of ordered steps performed on the random number E, the secret code S and the identification code In, P₂, S and In being stored in the data storage means of the second detachable data carrier, the random number E being generated in the second means and the second means including means for comparing the first and second resultants and authorizing access if R₁ =R₂ and prohibiting access if R₁ ≠

R₂.

16. A process for authorizing the distribution of articles or services at a data station the steps comprising:

(a) inserting first and second detachable data carriers into the data station, each data carrier having a processor, a memory, and interfacing circuits;

(b) generating a random number E and transferring the random number to each data carrier;

(c) producing a resultant R₁ =P₁ (S,E, In) in the processor of the first detachable data carrier where P₁ is a sequence of ordered steps performed on the random number E, a secret code S and an identification code In identifying the detachable data carrier or its holder, where P₁, S and In are stored in the first detachable data carrier;

(d) producing a resultant R₂ =P₂ (S, E, In) in the processor of the second detachable data carrier where P₂ is a sequence of ordered steps performed on said random number E, said secret code S and said identification code In;

(e) testing to see if R₁ =R₂ ;

(f) authorizing access to the data station if R₁ =R₂ ; and

(g) refusing access to the data station if R₁ ≠

R₂.

17. The process of claim 16 further comprising transferring the identification code In from the first detachable data carrier to the second detachable data carrier.

18. The process of claim 17, wherein the generating of the random number E occurs in the data station, the random number E then being fed into the processor of the first detachable data carrier and the processor of the second detachable data carrier.

19. The process of claim 16, wherein the testing to see if R₁ =R₂ is accomplished in the data station.