Process and apparatus for authenticating or certifying at least one item of information contained in a memory of a removable and portable electronic carrier, such as a card

• US 4,544,833 A
• Filed: 04/20/1983
• Issued: 10/01/1985
• Est. Priority Date: 05/14/1982
• Status: Expired due to Term

• Current Assignee: CII Honeywell Bull
• Original Assignee: CII Honeywell Bull
• Inventors: Ugon, Michel
• Primary Examiner(s): Trafton, David L.
• Application Number:
  US06/486,671
• Time in Patent Office: 895 Days
• Field of Search: 235/379, 235/380, 235/492
• US Class Current: 235/379
• CPC Class Codes: G06Q 20/229 Hierarchy of users of accounts
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G07F 7/08 by coded identity card or credit card or other personal identification means without personal verification means G07F7/02
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/12 Card verification
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853

Abstract

Process and device for authenticating or certifying at least one item of information contained in a memory of a portable electronic carrier, such as a credit card. To certify an item of information (I) recorded in a memory (M) of a card (C), the process consists in causing processing circuits (TC) of the card (C) to execute a program (P) which takes into account the address of the information (I) in the memory (M). The address is communicated to the card (C) externally. The execution of the program (P) leads to a result (R) which is compared with a result (R'"'"') calculated in identical fashion by a transaction apparatus (l) to which the card (C) is connected, agreement between the results establishing the authentication of the information.

Claims

1. A process of authenticating or certifying at least one item of information (I) contained in a memory of a portable electronic card adapted to be connected to an apparatus (1) that ensures the transfer of information with the card (C), comprising:

(a) causing the execution in card (C) and in the apparatus (1) of an identical program (P) that performs an algorithm leading to the calculation of a result (R) within the card and of a result (R'"'"') within the apparatus;

(b) comparing the results (R) and (R'"'"'), an agreement between these two results proving the authentication of the information (I),

(c) causing said algorithm to take account during the execution of said program a parameter

(i) representing an item of data which is correlated to the information (I) to be certified, and

(ii) a parameter (a) representing the position in the memory of the information (I) to be certified.

2. The process as defined in claim 1 consisting in conferring upon the parameter (i) the value of the information (I) to be certified.

3. The process as defined in claim 1 consisting in conferring upon the parameter (a) the value of the storage location for the information (I) to be certified.

4. The process as defined in claim 2 consisting in conferring upon the parameter (a) the value of the storage location for the information (I) to be certified.

5. The process as defined in claim 1 and further including the step of causing said algorithm to take account of a random number (E) supplied by the card (C) or by the apparatus (1).

6. The process as defined in claim 2 and further including the step of causing said algorithm to take account of a random number (E) supplied by the card (C) or by the apparatus (1).

7. The process as defined in claim 3 and further including the step of causing said algorithm to take account of a random number (E) supplied by the card (C) or by the apparatus (1).

8. The process as defined in claim 4 and further including the step of causing said algorithm to take account of a random number (E) supplied by the card (C) or by the apparatus (1).

9. The process as defined in claim 1 further including the step of causing said algorithm to take account of a secret code (S) that has been prerecorded in the card (C) and in the apparatus (1).

10. The process as defined in claim 2 further including the step of causing said algorithm to take account of a secret code (S) that has been prerecorded in the card (C) and in the apparatus (1).

11. The process as defined in claim 3 further including the step of causing said algorithm to take account of a secret code (S) that has been prerecorded in the card (C) and in the apparatus (1).

12. The process as defined in claim 4 further including the step of causing said algorithm to take account of a secret code (S) that has been prerecorded in the card (C) and in the apparatus (1).

13. The process as defined in claim 5 further including the step of causing said algorithm to take account of a secret code (S) that has been prerecorded in the card (C) and in the apparatus (1).

14. The process as defined in claim 6 further including the step of causing said algorithm to take account of a secret code (S) that has been prerecorded in the card (C) and in the apparatus (1).

15. The process as defined in claim 7 further including the step of causing said algorithm to take account of a secret code (S) that has been prerecorded in the card (C) and in the apparatus (1).

16. The process as defined in claim 8 further including the step of causing said algorithm to take account of a secret code (S) that has been prerecorded in the card (C) and in the apparatus (1).

17. The process as defined in claim 1 including the step of prerecording said program (P and a secret code (S) in the card (C) and in the apparatus (1), said program (P) and said secret code (S) being inaccessible externally of the card and the apparatus.

18. The process as defined in claim 17 including coupling to the apparatus (1) a portable carrier, such as a card (C₁), in which is recorded the program (P) and circuits for execution of the program within the card.

19. The process as defined in claim 18 further including the step of externally entering into the card C₁ the information (I) to be certified.

20. A portable electronic card for certifying at least one item of information transferred to the card from a transaction apparatus comprising at least one memory (m) within the card, said memory containing at least one item of information (I) to be certified, means (TC) within the card for execution of a program (P), said program being stored in the memory (m) and upon execution gives a result (R) taking account at least the information (I) and an address (a) of said information (I) in the memory (m), and means for communicating said address (a) to the means for execution (TC) externally of the card.

21. The card as defined in claim 20 wherein the memory (m) contains a secret code (S), said code (S) being taken into account by the program (P) during execution thereof.

22. The card as defined in claim 20 wherein the program (P) takes into account a random number (E) transmitted to the means.

23. The card as defined in claim 21 wherein the program (P) takes into account a random number (E) transmitted to the means.

24. A transaction apparatus adapted to be coupled with a portable electronic card (C) for certifying at least one item of information on the card (C) comprising a memory (M), means (TM) for processing a program (P) and a comparator circuit (CC), said program (P) being contained in the memory (M) and whose execution by the means (TM) takes into account of at least information (I) to be certified and an address (a) in said information (I) being stored at a memory (m) of the card (C) so as to yield a result (R'"'"'), said comparator circuit (CC) comparing the result (R'"'"') with a result (R) calculated within the card whereby agreement between said results (R and R'"'"') establish the authentication of the information (I).

25. The apparatus as defined in claim 24 wherein the program (P) includes a code (S) secret to the user and recorded in its memory (M), said secret code (S) being identical to a secret code (S) included in an identical program (P) within the card (C).

26. Apparatus as defined in claim 24 wherein the program (P) operates on a random number (E) supplied by a generator of random numbers (GNA) within the apparatus and means for transmitting said random number to the card (C).

27. Apparatus as defined in claim 25 wherein the program (P) operates on a random number (E) supplied by a generator of random numbers (GNA) within the apparatus and means for transmitting said random number to the card (C).

28. Apparatus as defined in claim 24 wherein memory (M), program (P) and the processing circuits (TM) are included in a second card (C₁) coupled to said apparatus.

29. Apparatus as defined in claim 25 wherein memory (M), program (P) and the processing circuits (TM) are included in a second card (C₁) coupled to said apparatus.

30. Apparatus as defined in claim 26 wherein memory (M), program (P) and the processing circuits (TM) are included in a second card (C₁) coupled to said apparatus.

31. A system for authenticating at least one item of information recorded in a portable electronic card from a transaction terminal, said card includng at least one first memory (M) within said card for storing at least one item of information (I) to be authenticated at an address (A), a program (P) stored within the first memory (M) and first means within the card for execution of said program to provide a first result (R) taking into account at least the information (I) and the address of the information (I) in the first memory (m), said transaction terminal including a second memory (M), a comparator circuit and second means for execution of the program (P), said program (P) being stored in the second memory (M), execution of said program (P) at said transaction terminal taking into account at least the information (I) to be certified, the address (a) of the information (I) in the memory (m) to provide a second result (R'"'"'), means coupling said card to said transaction terminal to enable execution of said program (P) by said first and second means and to effect a comparison of the first and second results (R and R'"'"') to establish authentication of the information (I) recorded in the card at address (a).

32. The system as set forth in claim 31 wherein the first memory (M) and second memory (M) each contain a code (S), said code (S) being taken into account by the program (P) during execution thereof.

33. The system as set forth in claim 32 wherein said terminal includes means for generating a random number (E) transmitted to said card via means for coupling and to be taken into account by the program (P).