Portable electronic apparatus capable of confirming validity of transaction data

• US 5,017,766 A
• Filed: 11/10/1988
• Issued: 05/21/1991
• Est. Priority Date: 11/13/1987
• Status: Expired due to Term

• Current Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Original Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Inventors: Matsuoka, Hideo, Tanaka, Tsutomu, Tamada, Masuo
• Primary Examiner(s): Levy, Stuart S.
• Assistant Examiner(s): Weinhardt, Robert
• Application Number:
  US07/269,451
• Time in Patent Office: 922 Days
• Field of Search: 235/379, 235/380, 235/382.5, 235/492, 902/26, 902/4, 902/5, 902/1, 902/2, 340/825.31, 340/825.33, 340/825.34
• US Class Current: 235/492
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3415 Cards acting autonomously as pay-media
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/4093 Monitoring of device authentication
• CPC Class Codes: G07F 7/082 Features insuring the integrity of the data on or in the card
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

In an IC card having an update function of transaction data, account type, supplementary amount, and valid date are input to the IC card. The IC card adds a renewal number data held therein to the input transaction data, and the data is encrypted using key data, thus generating reference confirmation data. Input confirmation data is generated using the identical encryption generation algorithm by a host system of a credit company. The input confirmation data is supplied to the IC card. A comparison means in the IC card compares the input confirmation data with the generated reference confirmation data. As a result of the comparison, if these data coincide each other, the input data is stored in the memory in the IC card as new transaction data and update processing is executed.

Claims

1. A portable electronic apparatus comprising:

data storing means for storing transaction data;

input means for inputting transaction data to be stored in said data storing means and confirmation data for confirming the validity of the transaction data;

additional data generating means for sequentially generating additional data, each additional data generated in a particular transaction being different from additional data which has been generated in an immediately previous transaction;

means for generating internal confirmation data from data which includes the additional data from said additional data generating means and the transaction data input from said input means;

comparing means for comparing the internal confirmation data generated by said internal confirmation data generating means with the confirmation data input from said input means, and outputting a comparing result; and

control means for storing the transaction data input from said input means into said data storing means when the comparison result from said comparing means indicates a coincidence.

2. An apparatus according to claim 1, wherein the additional data includes a renewal number of the transaction data.

3. An apparatus according to claim 1, wherein said internal confirmation data generating means generates the internal confirmation data by encrypting a combination of the additional data and the transaction data, using a binary value on the basis of Data Encryption Standard.

4. An apparatus according to claim 1, wherein the transaction data includes credit limit data, and expiration valid date data.

5. An apparatus according to claim 4, wherein said control means includes an update means for updating at least one of the credit limit data and the expiration date data, said additional data generating means includes means for changing a renewal number which is changed upon every execution of the update processing, and said internal confirmation data generating means generates changed internal confirmation data each time the update processing is to be performed.

6. An apparatus according to claim 1, wherein said apparatus is operatively connected to a host system, the confirmation data being generated by said host system.

7. An apparatus according to claim 6, wherein said internal confirmation data generating means includes a same data generating means as means for generating the confirmation data, provided in said host system.

8. An apparatus according to claim 5, wherein said additional data generating means includes means for protecting the renewal number from being updated by an external access.

9. An apparatus according to claim 4, wherein said control means includes means for updating at least one of a transaction amount data and a transaction valid date data, said additional data generating mans is a timer for generating date data, and said internal confirmation data generating means generates different reference confirmation data using the date data from said timer upon every update processing.

10. An apparatus according to claim 4, wherein said control means includes means for updating at least one of a transaction amount data and a transaction valid date data, said additional data generating means is a counter for counting a transaction number, and said internal confirmation data generating means generates different confirmation data using the transaction number from said counter upon every update processing.

11. An apparatus according to claim 1, wherein said apparatus is an IC card.

12. A portable electronic apparatus comprising:

memory means for storing data including inherent data to be used for generating confirmation data;

input means for inputting data including confirmation data;

control means for controlling said memory means and said input means;

confirmation data generating means for generating confirmation data encrypted using predetermined key data on the basis of input data from said input means and the inherent data; and

authentication means for verifying the confirmation data, generated by said confirmation data generating means, with the confirmation data input from said input means, to authenticate the validity of the input data whereby said control means stores the input data in said memory means if the validity of the input data is authenticated.