Identification card and authentication system therefor

• US 4,697,072 A
• Filed: 08/27/1985
• Issued: 09/29/1987
• Est. Priority Date: 09/07/1984
• Status: Expired due to Term

• Current Assignee: Casio Computer Company Limited
• Original Assignee: Casio Computer Company Limited
• Inventors: Kawana, Shigeyuki
• Primary Examiner(s): Pitts, Harold I.
• Application Number:
  US06/769,872
• Time in Patent Office: 763 Days
• Field of Search: 235/379, 235/380
• US Class Current: 235/380
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3415 Cards acting autonomously as pay-media
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 20/4093 Monitoring of device authentication
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00
• CPC Class Codes: Y10S 283/904 Credit card

Abstract

A card holder inputs personal identification number (PIN'"'"') data as secret data and transaction data (AMT) in an LSI in an identification card through a keyboard. The LSI calculates encrypted data (SAN) in accordance with the input data (PIN'"'"' and AMT). The encrypted data (SAN) is shown by the card holder to a cashier at a point-of-sales (POS) terminal. The POS terminal performs authentication of the card and the card holder in accordance with the encrypted data (SAN).

Claims

1. An identification card comprising:

input means having a keyboard for entering secret data unique to a card holder and transaction data;

calculating means for calculating encrypted data as a sales approval number (SAN) by using at least the secret and transaction data entered by said input means in accordance with a predetermined encryption algorithm; and

display means for visually displaying the encrypted data calculated by said calculating means, whereby the card holder and a transaction with the card in a store are authenticated in accordance with said encrypted data.

2. A card according to claim 1, further comprising:

a first memory means for storing the secret data entered by said input means;

a second memory means for storing transaction data entered by said input means;

a third memory means for storing key code data approved by an issuer upon issuance of said card;

means for detecting a coincidence between the secret data stored in said first memory means and the key code data stored in said third memory means; and

control means for receiving an output from said detecting means and supplying an enable signal to said calculating means.

3. A card according to claim 1, further including time measuring means for measuring a date, and wherein said calculating means includes the encryption algorithm for calculating the encrypted data in accordance with data representing the date as well as the secret data and the transaction data.

4. An identification card authenticaition system comprising:

an identification card means having input means for entering at least predetermined data which includes transaction data, first means for calculating first encrypted data by using said predetermined data including transaction data entered by a card holder in accordance with a predetermined encryption algorithm, and display means for dislaying the first encrypted data;

transfer means for transferring at least said first encrypted data displayed on said display means and transaction data to an external device; and

an authentication device means including second means for calculating second encrypted data by using data transferred by a transfer means in accordance with a reference enryption algorithm and measn for detecting a coincidence between the second encrypted data calculated by said second calculating means of said authentication device means and the first encrypted data calculated by said first calculating means of said identification card;

whereby the card holder and said identification card means are authenticated in accordance with the coincidence detected by said detecting means of said authentication device means.

5. A system according to claim 4, wherein the predetermined data entered by the card holder includes secret data registered at a card issuer by the card holder.

6. A system according to claim 4, wherein said input means of said identification card means includes a keyboard for enabling a card holder to enter the predetermined data, and display means for visually displaying encrypted data.

7. A system according to claim 4, wherein the predetermined data input by said input means of said identification card means further includs secret data registered at a card issuer by the card holder, the secret data being specified in said authentication device means in accordance with a card identification code assigned to said identification card means.

8. A system according to claim 4, wherein said authentication device means comprises:

first memory means for storing the predetermined data;

second memory means for storing the transaction data which are entered by said transfer means;

third memory means for storing the first encrypted data calculated by said identification card means;

means for obtaining a secret data of the card holder which forms part of the predetermined data;

said second means for calculating the second encrypted data calculates said second encrypted data by using the secret data, the predetermined data stored in said first memory means, and the transaction data stored in said second memory means in accordance with a predetermined encryption algorithm;

fourth memory means for storing the second encrypted data;

said coincidence detecting means detecting coincidence between the first and second encrypted data stored in said third and fourth memory means; and

means responsive to said coincidence detecting means for generating a coincidence result.

9. A system according to claim 8, wherein said means for obtaining the secret data of the card holder includes a memory table for storing secret data corresponding to the predetermined data.

10. A system according to claim 4, wherein:

said identification card means further includes first time measuring means for obtaining a date data, said calculating means calculating said first encrypted data in accordance with said predetermined data and date data measured by said first time measuring means; and

said authentication device means further includes second time measuring means for obtaining date data, said second calculating means calculating said second encrypted data in accordance with said transferred data and said date data measured by said second time measuring means.

11. A method for identifiying a card holder comprising the steps of:

comparing stored secret data unique to a card holder and input secret data entered from an input means provided in a card means, said stored secret data being previously stored in said card means;

entering transaction data from saidinput means when said stored secret data and input secret data coincide with each other;

calcualating in a first calculating means first encrypted data as a sales approval number (SAN) data in accordance with said entered transaction data and secret data;

transmitting from a point of sale to an issuer'"'"'s center first encrypted data obtained from said first calculating means and transaction data;

calculating in a second calculating means at said issuer'"'"'s center second encrypted data in accordance with transaction data sent forth from said point of sale and secret data previously stored;

comparing said first encrypted data transferred from said point of sale and said second encrypted data obtained from said second calculating means; and

transferring a resultant of comparison obtained in the comparing step to said point of sale.

12. A method for identifying a card holder according to claim 11, wherein said unique secret data is a personal identification number (PIN).

13. A method for identifying a card holder according to claim 12, wherein said first encrypted data calculating step further includes the step of displaying on a display means provided in said card means said first encrypted data calculated in said first calculating means.

14. A method for identifying a card holder according to claim 13, comprising transferring said first encrypted data and said transaction data to the issuer'"'"'s center through a telephone line.

15. A method for identifying a card holder according to claim 13, comprising displaying on a display means a comparison result of said stored secret data and entered secret data from said input means.