Method and apparatus for certifying services obtained using a portable carrier such as a memory card

• US 4,825,052 A
• Filed: 12/30/1986
• Issued: 04/25/1989
• Est. Priority Date: 12/31/1985
• Status: Expired due to Term

• Current Assignee: CP8 Technologies (Thales SA)
• Original Assignee: Bull CP8 (SLB)
• Inventors: Ugon, Michel, Chemin, Francois
• Primary Examiner(s): Paschall, M. H.
• Assistant Examiner(s): SALATA, ANTHONY J
• Application Number:
  US06/947,882
• Time in Patent Office: 847 Days
• Field of Search: 235/379, 235/380, 235/381, 235/492, 235/352, 235/352.5, 235/985
• US Class Current: 235/380
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/4093 Monitoring of device authentication
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G07F 7/082 Features insuring the integrity of the data on or in the card
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

A method and apparatus for certifying services obtained with the aid of a portable carrier such as a memory card. A portable carrier (2) such as a credit card is adapted to be connected to an apparatus (1) that calculates a visual record or certificate (C), composed of a result (R) and parameters (PI, PE) necessary for calculating the result. This result is calculated by processing circuits (T2) in the card (2) under the control of a program (P2) recorded in its memory (M2) and of a secret key (S). The result emitted after a service has been furnished can then be recalculated, to certify that the service has been furnished. r

Claims

1. A method of certifying a service furnished with the aid of a portable card which is coupled to an apparatus, the card having a memory (M2) and processing circuits (T2), the method comprising calculating in the processing circuits of the card a first result (R) based upon an internal parameter (PI) prerecorded in the memory of the card and/or upon an external parameter (PE) and upon a secret key (S);

preparing a certificate (C) comprising at least first and second data, the first datum being the first result (R) calculated by the processing circuits (T2) and the second datum being the internal and/or external parameters (PI, PE) used for calculating the result (R);

recording the certificate (C) on a carrier (3) as proof that the service was furnished;

recalculating in second processing circuit (T2) a second result (R) based upon the second datum recorded on the certificate and upon another secret key (S) corresponding to the first-mentioned secret key, comparing the second result with the first result recorded on the certificate, and certifying, upon the first and second results matching, that the service was properly obtained with the portable card.

2. A method as defined by claim 1, wherein said calculating the result (R) of the certificate (C), the calculation takes into account a variable internal parameter (PIV).

3. A method as defined by claims 1 or 2, wherein said calculating comprises taking into account a fixed internal parameter (PIF) belonging to the card in calculating the result (R) of the certificate (C).

4. A method as defined by claims 1 or 2, wherein said calculating comprises taking into account an external parameter (PEC) transmitted to the card (2) in calculating the result (R) of the certificate (C).

5. A method as defined by claim 3, wherein said calculating further comprises taking into account an external parameter (PEC) transmitted to the card (2) in calculating the result (R) of the certificate (C).

6. A method as defined by claims 1 or 2 wherein said calculating comprises taking into account a random external parameter (PEA) transmitted to the card (2) in calculating the result (R) of the certificate (C).

7. A method as defined by claim 3, wherein said calculating comprises taking into account a random external parameter (PEA) transmitted to the card (2) in calculating the result (R) of the certificate (C).

8. A method as defined by claim 4, wherein said calculating comprises taking into account a random external parameter (PEA) transmitted to the card 92) in calculating the result (R) of the certificate (C).

9. A method as defined by claim 5, wherein said calculating comprises taking into account a random external parameter (PEA) transmitted to the card (2) in calculating the result (R) of the certificate (C).

10. A method as defined by claim 4 further comprising supplying the external parameter (PEC) from a second card (4) similar to the first-mentioned card (2).

11. A method as defined by claim 5 further comprising supplying the external parameter (PEC) from a second card (4) similar to the first-mentioned card (2).

12. A method as defined by claims 1 or 2 further comprising displaying the result (R) of the certificate (C) on a display unit (11) and retranscribing the result on the carrier (3).

13. A method as defined by claims 1 or 2 further comprising automatically posting on the carrier (3) the first result (R) of the certificate (C) calculated by the card (2).

14. A method as defined by claims 1 or 2 wherein said recording comprises recording the certificate (C) on an electronic or magnetic carrier.

15. A method as defined by claims 1 or 2 further comprising verifying the authenticity of the card (2) by picking up in the card (2) a first datum (I2) that is not in code and a second datum that is an encoded first datum obtained by an encoding algorithm, applying an inverse decoding function to the encoded second datum to retrieve a non-encoded datum, and verifying that this retrieved non-encoded datum is identical to the non-encoded first datum picked up in the card (2).

16. A method as defined by claim 15, wherein the encoding algorithm is the inverse function of the secret key of an algorithm having a public key, and the encoding algorithm is a public function with a public key of the algorithm type.

17. A method as defined by claim 1, wherein the first-mentioned secret key is stored in the memory of said portable card, and wherein said other secret key is stored in a second control card.

18. An apparatus (1) certifying a service furnished with the aid of a portable memory card, the apparatus comprising a first memory (M1), first processing circuit means (T1), and a coupling circuit (12) for removably receiving the portable card (2), said card 92) comprising a second memory (M2) and second processing circuit means (T2) for calculating a result (R) based on a program (P2) recorded in the second memory (M2), and which takes into account internal parameters (PI) recorded in the second memory (M2) and/or external parameters (PE) entered into the card (2), said result being unique for each service furnished with the card (2).

19. An apparatus as defined by claim 18 wherein the first memory (M1) contains an external parameter (PEC) belonging to a vendor entity, the external parameter being taken into account by the program in the card for calculating the result (R).

20. An apparatus as defined by claim 19 wherein the parameter (PEC) is supplied from another card assigned to a vendor of the service and which is coupled to said apparatus (1).