Identification system for authenticating both IC card and terminal

• US 4,746,788 A
• Filed: 09/15/1986
• Issued: 05/24/1988
• Est. Priority Date: 09/17/1985
• Status: Expired due to Term

• Current Assignee: Casio Computer Company Limited
• Original Assignee: Casio Computer Company Limited
• Inventors: Kawana, Shigeyuki
• Primary Examiner(s): Leung, Philip H.
• Application Number:
  US06/907,677
• Time in Patent Office: 617 Days
• Field of Search: 235/380, 235/382, 235/492, 235/379, 235/375, 235/381, 340/825.34, 340/825.33
• US Class Current: 235/380
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/4097 using mutual authentication between devices and transaction partners
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00

Abstract

Data unique to an IC card and encrypted unique data obtained by encrypting the unique data are previously stored in the IC card. The encrypted unique data is decrypted in an IC card terminal, to obtain decrypted data and the decrypted data and unique data stored in the IC card are compared on the side of the IC card and also in the IC card terminal, whereby the authenticity of both the IC card and IC card terminal is confirmed.

Claims

1. An identification system comprising:

IC card means;

IC card terminal means capable of electrically communicating with the IC card means when the IC card means is loaded thereon;

said IC card means including first memory means for storing at least data unique to said IC card means and encrypted unique data obtained by encrypting said unique data;

said IC card terminal means including decrypting means for decrypting said encrypted unique data stored in said first memory means to derive decrypted unique data;

said IC card means further including first comparing means for comparing said decrypted unique data sent from said IC card terminal means with said unique data stored in said first memory means so as to judge whether said unique data is coincident with said decrypted unique data; and

said IC card terminal further including second comparing means for comparing said decrypted unique data with said unique data stored in said first memory means and sent from said IC card means so as to judge whether said unique data is coincident with said decrypted unique data, thereby confirming identities of both said IC card means and said IC card terminal means.

2. An identification system as claimed in claim 1, wherein, when the result of comparison by at least one of said first and second comparing means is non-coincident, subsequent communication between said IC card means and said IC card terminal means is interrupted.

3. An identification system as claimed in claim 2, wherein said IC card terminal means further includes second memory means for storing key information for decryption, said decrypting means of said IC card terminal means decrypting said encrypted unique data stored in said first memory means on the basis of a "RSA" algorithm using said key information for decryption.

4. An identification system as claimed in claim 2, wherein said unique data and encrypted unique data stored in said first memory means of said IC card means each comprise a plurality of different data information;

said IC card means includes first selecting means for selecting at least one of said plurality of unique data;

said IC card terminal means includes second selecting means for selecting at least one of a plurality of decrypted data decrypted by said decrypting means; and

said first comparing means compares said unique data with said decrypted data selected by said first and second selecting means so as to judge coincidence between said data.

5. An identification system as claimed in claim 4, wherein, when the result of comparison by said first comparing means in said IC card means is coincident, said second comparing means of said IC card terminal means compares all of the unique data stored in said first memory means with all of the decrypted data decrypted by said decrypting means.

6. An identification system as claimed in claim 5, wherein said unique data include data "PAN", "CHN" and "EPD", and said decrypted data is obtained by encrypting said data "PAN", "CHN" and "EPD" on the basis of an RSA algorithm.