Automated transaction system

• US 4,802,218 A
• Filed: 11/26/1986
• Issued: 01/31/1989
• Est. Priority Date: 11/26/1986
• Status: Expired due to Term

• Current Assignee: Pitney Bowes Incorporated (Böwe Systec AG)
• Original Assignee: Wright Technologies Private Limited
• Inventors: Wright, Christopher B., Bristow, Stephen
• Primary Examiner(s): CANGIALOSI, SALVATORE A
• Application Number:
  US06/935,244
• Time in Patent Office: 797 Days
• Field of Search: 380/23, 380/26, 380/25, 380/45, 380/51, 255/375, 255/379, 255/380, 255/492, 255/487, 255/488, 364/405, 364/200, 364/900
• US Class Current: 705/60
• CPC Class Codes: G06K 7/0034 the connector being capable of simultaneously receiving a plurality of cards in the same insertion slot
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/2295 Parent-child type, e.g. where parent has control on child rights
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/363 with the personal data of a user
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/3676 Balancing accounts
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G07B 17/0008 Communication details outside or between apparatus coin-freed apparatus for franking per se G07F17/26
• CPC Class Codes: G07B 17/00193 Constructional details of apparatus in a franking system
• CPC Class Codes: G07B 17/00314 Communication within apparatus, personal computer [PC] system, or server, e.g. between printhead and central unit in a franking machine
• CPC Class Codes: G07B 17/00508 Printing or attaching on mailpieces printing mechanisms B41J; security printing B41M3/14; marking methods B41M5/00; inks C09D11/00; record carriers with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G07B 17/00733 Cryptography or similar special procedures in a franking system
• CPC Class Codes: G07B 2017/00177 from a portable device, e.g. a card or a PCMCIA
• CPC Class Codes: G07B 2017/00225 Vending machine or POS (Point Of Sale) apparatus
• CPC Class Codes: G07B 2017/00322 Communication between components/modules/parts, e.g. printer, printhead, keyboard, conveyor or central unit
• CPC Class Codes: G07B 2017/00354 Setting of date
• CPC Class Codes: G07B 2017/00588 Barcode
• CPC Class Codes: G07B 2017/00653 Special inks, e.g. fluorescent
• CPC Class Codes: G07B 2017/00701 Measuring the weight of mailpieces
• CPC Class Codes: G07B 2017/0075 : Symmetric, secret-key algorithms, e.g. DES, RC2, RC4, IDEA, Skipjack, CAST, AES
• CPC Class Codes: G07B 2017/00838 : Personal data, i.e. biometrics
• CPC Class Codes: G07F 17/26 : for printing, stamping, franking, typing or teleprinting apparatus ticket printing or the like apparatus G07F17/42
• CPC Class Codes: G07F 7/08 : by coded identity card or credit card or other personal identification means without personal verification means G07F7/02
• CPC Class Codes: G07F 7/0866 : by active credit-cards adapted therefor G07F7/1008 takes precedence
• CPC Class Codes: G07F 7/1008 : Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/12 : Card verification
• CPC Class Codes: G07F 7/127 : in which both online and offline card verification can take place

Abstract

An automated transaction system employs a card maintaining an account balance and a terminal for dispensing an article of value and debiting the card'"'"'s balance. The card has a secure, resident microprocessor which executes an interactive handshake recognition procedure with a secure, resident microprocessor in the value dispensing section of the terminal prior to actuating a requested transaction. In the preferred form, the handshake procedure operates by an exchange of encrypted words between the card microprocessor and the dispenser microprocessor using corresponding encryption algorithms and a secret key number, and the card microprocessor providing a command signal to the dispenser microprocessor only upon successful completion of the procedure.

The automated transaction system is particularly suitable as a postage metering terminal having a postmark printer as the value dispensing section. Postage is printed only if the handshake procedure is executed between the card microprocessor and the printer microprocessor. The postal terminal also receives a rate card for computing postage automatically, and prints an invisible authentication mark along with the postmark to discourage counterfeiting. The terminal can be configured to print standard form waybills for postal and private carrier services by loading waybill information from an IC ROM services card. The balance in the user card is refilled in a refilling terminal using a master card which maintains a master account balance and a supervisor card which is in the custody of an authorized person.

Claims

1. An automated transaction system comprising:

(a) a user card having a card microprocessor mounted therein for maintaining a transaction account, said user card having data output means connected to said microprocessor;

(b) a transaction terminal having first receiving means for receiving said user card inserted therein and establishing a connection with said user card data output means, and operating means including a terminal microprocessor for performing a set of terminal operations;

(c) a value dispensing section securely mounted in said transaction terminal having a dedicated, dispensing section microprocessor incorporated therein for operating said value dispensing section to dispense an item of value separately from performance by said transaction terminal of said set of terminal operations; and

(d) first path means formed in said transaction terminal for establishing a data communication path between said user card microprocessor inserted in said first receiving means of said transaction terminal and said dispensing section microprocessor of said value dispensing section, such that said user card microprocessor communicates with said dispensing section microprocessor to authorize the dispensing of an item of value by said value dispensing section and correspondingly to update said transaction account maintained by said user card microprocessor.

2. An automated transaction system according to claim 1, wherein said user card microprocessor and said dispensing section microprocessor have security program means respectively incorporated therein for executing a handshake procedure between said microprocessors and preventing said value dispensing section from dispensing an item of value until said handshake procedure has been completed.

3. An automated transaction system according to claim 2, wherein said handshake procedure includes mutual verification of said user card and of said value dispensing section to each other in order to prevent said value dispensing section from dispensing an item of value and said user card from updating said transaction account until the validity of said user card and of said value dispensing section for executing a value dispensing operation is confirmed.

4. An automated transaction system according to claim 1, wherein said dispensing section microprocessor is physically permanently bonded in said value dispensing section such that said dispensing section microprocessor cannot be physically tampered with without disabling said value dispensing section.

5. An automated transaction system according to claim 1, wherein said security program means of said card microprocessor includes a first encryption algorithm, an inverse second encryption algorithm, and an object number, and said security program means of said dispensing section microprocessor includes an inverse first encryption algorithm, which is complementary to said first encryption algorithm, and a second encryption algorithm, which is a complement of said inverse second encryption algorithm,

wherein said handshape procedure is executed by said security program means of said card microprocessor encrypting said object number with said first encryption algorithm and sending a resulting encrypted first word to said dispensing section microprocessor, said security program means of said dispensing section microprocessor decoding said object number from said first word with said inverse first encryption algorithm, encrypting said decoded object number with said second encryption algorithm, and sending a resulting encrypted second word to said card microprocessor, said security means of said card microprocessor decoding said object number from said second word with said inverse second encryption algorithm, comparing said decoded object number with said object number first encrypted, and sending a value dispensing command signal to said dispensing section microprocessor if said numbers match, and said security program means of said dispensing section microprocessor operating said value dispensing section only in response to said command signal.

6. An automated transaction system according to claim 1, wherein said transaction terminal includes input means for inputting a value dispensing request, and said terminal microprocessor establishes said data communication path between said card microprocessor inserted in said transaction terminal and said dispensing section microprocessor in response to said value dispensing request.

7. An automated transaction system according to claim 5, wherein said card microprocessor includes an associated memory section for storing a secret key number, said dispensing section microprocessor includes an associated memory section for storing said secret key number, and said security program means of said card microprocessor and said dispensing section microprocessor each including means for performing the encryption and decoding operations with said secret key number.

8. An automated transaction system according to claim 1, wherein said value dispensing section is a printer for printing an indicia of value on an article, and said dispensing section microprocessor incorporates printing program means to drive said printer to print said indicia of value, and said security program means of said user card microprocessor and said printer microprocessor includes a program step requiring the execution of the programmed handshake procedure each time the printer is to be driven to print an indicia of value.

26. An automated transaction system according to claim 6, wherein said user card microprocessor has an associated memory for recording an identification number assigned to said terminal, said security program means of said terminal microprocessor including means for providing its assigned identification number in response to an identification command signal, said security program means of said user card microprocessor including means for initiating said identification command signal to said terminal microprocessor and for comparing the identification number provided by said terminal microprocessor to said recorded identification number, in order to confirm whether said terminal is authorized for executing a transaction with said user card.

27. An automated transaction terminal system according to claim 6, wherein said terminal microprocessor has an associated memory for recording an identification number assigned to said user card, said security program means of said user card microprocessor including means for providing its assigned identification number in response to an identification command signal, said security program means of said terminal microprocessor including means for initiating said identification command signal to user card microprocessor and for comparing the identification number provided by said user card microprocessor to said recorded identification number, in order to confirm whether said user card is authorized for executing a transaction in said terminal.

33. An integrated automated postal transaction system according to claim 1 wherein a record of the value amount of each completed transaction is stored by said user card microprocessor, and a current transaction account balance for said user card is computed from the stored records when a transaction is requested.

9. An automated postal transaction system comprising:

(a) a user card having a card microprocessor mounted therein for maintaining a postage transaction account, said user card having data output means connected to said microprocessor;

(b) a transaction terminal having first receiving means for receiving said user card inserted therein and establishing a connection with said user card data output means, and operating means including a terminal microprocessor for performing a set of terminal operations;

(c) a printing section securely mounted in said transaction terminal having a printhead and a dedicated, printing section microprocessor for operating said printhead incorporated therein in order to print a postage value mark separately from performance by said transaction terminal of said terminal operations; and

(d) first path means formed in said transaction terminal for establishing a data communication path between said user card microprocessor inserted in said first receiving means of said transaction terminal and said printing microprocessor of said printing section, such that said user card microprocessor communicates with said printing section microprocessor to authorize the printing of a postage value mark by said printhead and correspondingly to update said postage transaction account maintained by said user card microprocessor.

10. An automated postal transaction system according to claim 9, wherein said security program means of said card microprocessor includes a first encryption algorithm, an inverse second encryption algorithm, and an object number, and said security program means of said printing section microprocessor includes an inverse first encryption algorithm, which is complementary to said first encryption algorithm, and a second encryption algorithm, which is a complement of said inverse second encryption algorithm,

wherein said handshake procedure is executed by said security program means of said card microprocessor encrypting said object number with said first encryption algorithm and sending a resulting encrypted first word to said printing section microprocessor, said security program means of said printing section microprocessor decoding said object number from said first word with said inverse first encryption algorithm, encrypting said decoded object number with said second encryption algorithm, and sending a resulting encrypted second word to said card microprocessor, said security program means of said card microprocessor decoding said object number from said second word with said inverse second encryption algorithm, comparing said decoded object number with said object number first encrypted, and sending a postage print command signal to said printing section microprocessor if said numbers match, and said security program means of said printing section microprocessor operating said printing section only in response to said command signal.

11. An automated postal transaction system according to claim 9, wherein said transaction terminal includes input means for inputting a postage printing request, and said terminal microprocessor establishes said data communication path between said card microprocessor inserted in said transaction terminal and said printing section microprocessor in response to said postage printing request.

12. An automated postal transaction system according to claim 9, wherein said user card microprocessor and said printing section microprocessor have security program means respectively incorporated therein for executing a handshake procedure between said microprocessors and preventing said printhead from printing a postage value mark until said handshake procedure has been completed.

13. An automated postal transaction system according to claim 12, wherein said handshake procedure includes mutual verification of said user card and of said printing section to each other in order to prevent said printhead from printing a postage value mark and said user card from updating said postage transaction account until the validity of said user card and of said printing section for executing a postage printing operation is confirmed.

14. An automated postal transaction system according to claim 9, wherein said printing section microprocessor is physically permanently bonded together with said printhead in said printing section such that said printing section microprocessor cannot be physically tampered with without disabling said printhead.

15. An automated postal transaction system according to claim 9, wherein said system further includes:

a rate card having an IC memory mounted therein for storing postal rate information in accordance with selected rate classifications, and data output means connected to said memory;

said transaction terminal further comprises;

second receiving means for insertion of said rate card therein and establishing an operative connection with said rate card data output means, second path means for establishing a data communication path between said rate card memory through said rate card data output means and said transaction terminal microprocessor, and terminal input means for inputting rate classification information and for requesting a postal transaction operation; and

said transaction terminal microprocessor further includes rate calculation program means for calculating a postage value amount to be printed by said printing section in response to said rate classification information input through said terminal input means using said postal rate information of said rate card memory.

16. An automated postal transaction system according to claim 9, wherein said system further includes:

a services card having an IC memory mounted therein for storing waybill form information and waybill program information for generating a waybill form, and data output means connected to said memory;

said transaction terminal further comprises;

third receiving means for insertion of said services card therein and establishing an operative connection with said services card data output means, third path means for establishing a data communication path between said services card memory through said services card data output means and said transaction terminal microprocessor, and terminal input means for inputting waybill information and for requesting a waybill generating operation, and

said transaction terminal microprocessor further includes waybill generating program means for loading said waybill form information and waybill program information from said services card memory for operation thereon by said transaction terminal microprocessor to generate a waybill form in accordance therewith using the waybill information input through said terminal input means.

17. An automated postal transaction system according to claim 11 wherein said terminal input means includes a keyboard, and said transaction terminal further comprises output means including a display connected to said terminal microprocessor, a slot for insertion of said user card, and a switch in said slot for activating said terminal microprocessor to operate a terminal operations program through said input and output means upon insertion of said user card against said switch in said slot.

18. An automated postal transaction system according to claim 15 wherein said system further comprises an automatic weighing scale, and said terminal input means includes means for establishing a data communication path with an output of said scale.

19. An automated postal transaction system according to claim 16 wherein said waybill form includes a plurality of separate information fields, and said waybill program information includes cursor control information for causing said program means of said terminal microprocessor to display a cursor at one of said information fields and moving to another information field in sequence upon operation of an information entry key on said keyboard.

28. An automated postal transaction terminal system according to claim 9, wherein said printing section includes a print head, and said printer program means of said printing section microprocessor includes means for operating said print head to print an authentication code with said postmark.

29. An automated postal transaction terminal system according to claim 28, wherein said printing section includes a first ink supply having invisible, machine-readable ink and a second ink supply having visible ink, and said program means of said printing section microprocessor operates said print head to print on a first pass an invisible authentication mark and then a visible postmark on a second pass over said authentication mark.

30. An automated postal transaction terminal system according to claim 29, wherein said postmark includes bar code representing information provided for said postmark and said authentication mark is a section of said bar code representing an encryption of a part of said postmark information.

34. An integrated automated postal transaction system according to claim 9 wherein a record of the value amount of each completed transaction is stored by said user card microprocessor, and a current transaction account balance for said user card is computed from the stored records when a transaction is requested.

20. An automated transaction system comprising:

(a) a user card having a user card microprocessor mounted therein for maintaining a user account balance, said user card having data output means connected to said microprocessor;

(b) a master card having a master card microprocessor mounted therein for maintaining a master account balance and for transferring an account value amount to the user account balance of an authorized user card, said master card having data output means connected to said microprocessor;

(c) a refilling terminal having first receiving means for receiving said user card inserted therein and establishing a connection with said user card data output means, second receiving means for receiving said master card inserted therein and establishing a connection with said master card data output means, and operating means including a terminal microprocessor for performing a set of terminal operations; and

(d) first path means formed in said refilling terminal for establishing a data communication path between said user card microprocessor inserted in said first receiving means and said master card microprocessor inserted in said second receiving means of said refilling terminal,

wherein said master card microprocessor and said user card microprocessor have security program means respectively incorporated therein for executing a handshake procedure between said microprocessors and preventing said account value amount from being transferred from said master card to said user card until said handshake procedure has been completed; and

said master card microprocessor communicates with said user card microprocessor to authorize the transfer of an account value amount to the user account balance of the user card and correspondingly to update said master account balance maintained by said master card microprocessor separately from performance by said refilling terminal of said terminal operations.

21. An automated transaction system according to claim 20, wherein said handshake procedure includes mutual verification of said user card and of said master card to each other in order to prevent said account value amount from being transferred from said master card to said user card and said master card from updating said master account balance until the validity of said user card and of said master card for executing an account value transfer is confirmed.

22. An automated transaction system according to claim 20 adapted as an integrated family of terminals and transaction cards, including:

(a) a plurality of said user cards;

(b) at least one said master card;

(c) at least one transaction terminal having first receiving means for receiving any one of said plurality of user cards inserted therein and establishing an operative connection with said card data output means, and a value dispensing section securely mounted in said transaction terminal for executing a value dispensing operation;

(d) each user card microprocessor having purchase transaction program means incorporated therein for debiting its user account balance by the amount of each value dispensing operation executed with said value dispensing section in said transaction terminal, and account value transaction program means for refilling its user account balance by an account value transfer operation executed with said master card in said refilling terminal.

23. An automated transaction system according to claim 20 further comprising a supervisor card having a microprocessor mounted therein and having data output means connected to said microprocessor, said transaction terminal incorporating said refilling terminal including third means for receiving said supervisor card therein and means for establishing a second data communication path between said master card microprocessor and said supervisor card microprocessor, and said master and supervisor cards each including security program means for executing the programmed handshake procedure between said master card and supervisor card microprocessors and preventing said master card microprocessor from proceeding with said transaction until said handshake procedure has been completed.

24. An automated transaction terminal system according to claim 23, wherein said security program means of said supervisor card microprocessor includes a first encryption algorithm, an inverse second encryption algorithm, and an object number, and said security program means of said master card microprocessor includes an inverse first encryption algorithm, which is complementary to said first encryption algorithm, and a second encryption algorithm, which is a complement of said inverse second encryption algorithm,

wherein said handshape procedure is executed by said security program means of said supervisor card microprocessor encrypting said object number with said first encryption algorithm and sending a resulting encrypted first word to said master card microprocessor, said security program means of said master card microprocessor decoding said object number from said first word with said inverse first encryption algorithm, encrypting said decoded object number with said second encryption algorithm, and sending a resulting encrypted second word to said supervisor card microprocessor, said security program means of said supervisor card microprocessor decoding said object number from said second word with said inverse second encryption algorithm, comparing said decoded object number with said object number first encrypted, and sending a transaction command signal to said master card microprocessor if said numbers match, and said security program means of said master card microprocessor executing said transaction only in response to said command signal.

25. An automated transaction terminal system according to claim 23, wherein said supervisor card microprocessor has an associated memory for recording an identification number assigned to said master card, said security program means of said master card microprocessor including means for providing its assigned identification number in response to an identification command signal, said security program means of said supervisor card microprocessor including means for initiating said identification command signal to said master card microprocessor and for comparing the identification number provided by said mastercard microprocessor to said recorded identification number, in order to confirm whether said master card is authorized for executing a account value transfer.

31. An integrated automated transaction system according to claim 22 adapted for postal transactions, wherein said system further includes a rate card having an IC memory for storing postal rate information in accordance with zone and weight classifications, said transaction terminal further comprises information input means, a terminal microprocessor, a printer for printing postal indicia as said value dispensing section, second means for receiving said rate card, and means for establishing a second data communication path between said rate card memory and said terminal microprocessor, and said terminal microprocessor further includes program means for calculating a requested postage value amount in response to zone and weight information input to said terminal using said postal rate information of said rate card memory.

32. An integrated automated transaction system according to claim 22 adapted for postal transactions, wherein said system further includes a services card having an IC memory for storing waybill form information and program information for filling in the saybill form, said transaction terminal further comprises information input means, a display, a terminal microprocessor, a printer for printing waybill indicia as said value dispensing section, means for receiving said services card, and means for establishing another data communication path between said services card memory and said terminal microprocessor, and said terminal microprocessor further includes program means for loading said waybill form information and program information in said terminal microprocessor and operating said terminal input means, display, and printer in accordance therewith.

35. An integrated automated postal transaction system according to claim 20 wherein a record of the value amount of each completed transaction is stored by said user card microprocessor, and a current transaction account balance for said user card is computed from the stored records when a transaction is requested.

36. An automated transaction system comprising:

(a) a user card having a user card microprocessor mounted therein for maintaining a user account balance, said user card having data output means connected to said microprocessor;

(b) a master card having a master card microprocessor mounted therein for maintaining a master account balance and for transferring an account value amount to the user account balance of an authorized user card, said master card having data output means connected to said microprocessor;

(c) a supervisor card having a supervisor card microprocessor mounted therein and data output means connected to said microprocessor;

(d) a refilling terminal having first receiving means for receiving said user card inserted therein and establishing a connection with said user card data output means, second receiving means for receiving said master card inserted therein and establishing a connection with said master card data output means, third receiving means for receiving said supervisor card inserted therein and establishing a connection with said supervisor card data output means;

(e) first path means formed in said refilling terminal for establishing a data communication path between said user card microprocessor inserted in said first receiving means and said master card microprocessor inserted in said second receiving means of said refilling terminal, such that said master card microprocessor communicates with said user card microprocessor to authorize the transfer of an account value amount to the user account balance of the user card and correspondingly to update said master account balance maintained by said master card microprocessor; and

(f) second path means formed in said refilling terminal for establishing a data communication path between said master card microprocessor inserted in said second receiving means and said supervisor card microprocessor inserted in said third receiving means of said refilling terminal, such that said supervisor card microprocessor communicates with said master card microprocessor to authorize said master card to execute an account value transfer to the user account balance of a user card.

37. An automated transaction system according to claim 36 adapted as an integrated family of terminals and transaction cards, including:

(a) a plurality of said user cards;

(b) a subplurality of said master cards;

(c) a plurality of transaction terminals each having first receiving means for receiving any one of said plurality of user cards inserted therein and establishing an operative connection with said card data output means, and a value dispensing section securely mounted in said transaction terminal for executing a value dispensing operation;

(d) each user card microprocessor having purchase transaction program means incorporated therein for debiting its user account balance by the amount of each value dispensing operation executed with said value dispensing section in said transaction terminal, and account value transaction program means for refilling its user account balance by an account value transfer operation executed with said master card in said refilling terminal;

(e) a subplurality of said refilling terminals; and

(f) said supervisor card microprocessor having supervisory program means incorporated therein for authorizing a master card inserted in a respective one of said subplurality of refilling terminals to execute account value transfer transactions with user cards inserted in said one refilling terminal.

38. An integrated automated postal transaction system according to claim 36 wherein a record of the value amount of each completed transaction is stored by said user card microprocessor, and a current transaction account balance for said user card is computed from the stored records when a transaction is requested.

39. An automated transaction system according to claim 36, wherein said supervisor card microprocessor and each said master microprocessor have security program means incorporated therein, respectively, for executing a programmed handshake procedure between said microprocessors and for preventing execution of an account value transfer transaction between said master card and a user card inserted in said refilling terminal until said handshake procedure is completed and the validity of said master card for executing the transaction is confirmed.

40. A automated transaction system comprising:

(a) a user-carried, portable first unit having a first microprocessor mounted therein for maintaining a user transaction account, said first unit having data output means connected to said microprocessor;

(b) a transaction terminal having first receiving means for establishing a connection with said data output means of said first unit, and operating means including a second microprocessor for performing a set of terminal operations;

(c) a second unit connected with said transaction terminal having a dedicated third microprocessor securely incorporated therein for performing a value transfer operation separately from performance by said transaction terminal of said set of terminal operations;

wherein said second unit is a dispensing section for dispensing an item of value, and said user card microprocessor and said third microprocessor of said dispensing section having security program means respectively incorporated therein for executing a handshake procedure between said microprocessors and preventing said value dispensing section from dispensing an item of value until said handshake procedure has been completed; and

(d) path means in said transaction terminal for establishing a data communication path between said first microprocessor of said first unit and said third microprocessor of said second unit such that said first microprocessor communicates with said third microprocessor to authorize the performance of the value transfer transaction by said second unit and corresponding to update said transaction account maintained by said first microprocessor of said first unit.

41. An automated transaction system according to claim 40, wherein said handshake procedure includes mutual verification of said user card and of said value dispensing section to each other in order to prevent said value dispensing section from dispensing an item of value and said user card from updating said transaction account until the validity of said user card and of said value dispensing section for executing a value dispensing operation is confirmed.

42. An automated transaction system according to claim 40, wherein said third microprocessor of said dispensing section is physically permanently bonded in said dispensing section such that said third microprocessor cannot be physically tampered with without disabling said dispensing section.