Authentication system between a card reader and a pay card exchanging data

• US 4,612,413 A
• Filed: 07/18/1984
• Issued: 09/16/1986
• Est. Priority Date: 07/29/1983
• Status: Expired due to Fees

• Current Assignee: De La Rue Cartes et Systemes
• Original Assignee: US Philips Corporation (Koninklijke Philips N.V.)
• Inventors: Robert, Serge, Cahart, Olivier F., Le Marchant, Pierre
• Primary Examiner(s): Cangialosi, Salvatore
• Assistant Examiner(s): Lewis, Aaron J.
• Application Number:
  US06/632,092
• Time in Patent Office: 790 Days
• Field of Search: 235/379, 235/380, 235/382, 235/441, 178/22.08, 178/22.13
• US Class Current: 713/169
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853

Abstract

A reciprocal authentication system between two groups of electronic units which can be interconnected for the exchange of data.

The system periodically supplies a variable access key for the encrypting of confidential exchanges.

Claims

1. A reciprocal authentication system for mutually authenticating an interconnected reader terminal as a first station and an electronic card as a second station towards each other, said card storing a personalized first secret code (S) and personalized second secret code (S), said second secret code being linked to said first secret code by means of a first non-personalized secret transformation function (F1), said system comprising:

first transfer means (T1) for transferring said first secret code to said terminal,

in said terminal first processing means for recovering by means of said first transformation function (F1) said second secret code (s1);

in one of said stations random number generating means (GEN) for generating a random number (RT, QT) as a session key and second transfer means (T2) for transferring this random number to the other station;

in either station second processing means for receiving said second secret code and a first part (RT) of said random number for generating by means of a second transformation function (F2) a reader access key and a card access key, respectively (KSL, KSC),

in either station third processing means for receiving said reader access key and card access key, respectively, and furthermore a second part (QT) of said random number for generating a means of a third transformation function (F3) first reader comparison data and first card comparison data, respectively (DCL1, DCC1),

in either station fourth processing means for receiving said reader access key and card access key, respectively, and furthermore said reader comaprison data and card comparison data, respectively for generating by means of a fourth transformation function (f4) second reader comparison data and second card comparison data (DLC2, DCC2), respectively,

third transfer means (T4) for transferring said second reader comparison data and said second card comparison data from a sending station to a receiving station,

in said receiving station first comparing means for comparing said second reader comparison data and second card comparison data and upon equality generating a first authorization signal, (LOK),

fourth transfer means (T5) for transferring under control of said first authorization signal comparison data from said receiving station to said sending station,

in said sending station second comparing means for comparing said first reader comparison data and first card comparison data and upon equality generating a second authorization signal (COK), the combination of said first and second authorization signals enabling further transfer of information between said two stations.

2. A system as claimed in claim 1, wherein at least two of said transformation functions are identical.

3. A system as claimed in claim 1, wherein said random number generator is situated in the card and said first and second transfer means are coexistently operative (T12).

4. A system as claimed in claim 2, wherein said card comprises start signal generating means for transferring a start signal to the reader upon reaching said interconnected state.

5. A system as claimed in claim 1, 2 or 3, wherein said processing means in said reader has a higher operating speed than said processing means in the card, said reader having waiting means (W) being activated upon completion of said generating by the fourth processing means in the reader, and being deactivated upon completion of said generating by the fourth processing means in the card communicated thereto as an enabling transfer signal (T3).

6. A card for use in a system as claimed in claim 1, 2, or 3, wherein said fourth processing means has an enabling output for communicating, upon completion of said fourth processing, an enabling transfer signal to said reader (T3).

7. a system as claimed in claim 1, said system having start signal generating means for generating, upon reaching an interconnected state, a start signal for communication (T0) between said stations, said system having repeat means for generating in said interconnected state said start signal, thereby activating said random number generator.