Two-way authentication system between user's smart card and issuer-specific plug-in application modules in multi-issued transaction device

• US 5,036,461 A
• Filed: 05/16/1990
• Issued: 07/30/1991
• Est. Priority Date: 05/16/1990
• Status: Expired due to Term

• Current Assignee: Elliott, John C., James A O'Connell, Jarett, Keith, Lawrence Ladouceur, William Altman
• Original Assignee: Elliott, John C., James A O'Connell, Jarett, Keith, Lawrence Ladouceur, William Altman
• Inventors: Elliott, John C., Jarett, Keith, O'Connell, James A., Altman, William, Ladouceur, Lawrence
• Primary Examiner(s): NOT, DEFINED
• Application Number:
  US07/525,159
• Time in Patent Office: 440 Days
• Field of Search: 364/408, 235/379, 235/380, 902/26, 380/24, 340/825.34
• US Class Current: 705/44
• CPC Class Codes: G06Q 20/105 involving programming of a portable memory device, e.g. IC cards, "electronic purses"
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3552 Downloading or loading of personalisation data
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4097 using mutual authentication between devices and transaction partners
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00

Abstract

A transaction terminal for use with diverse credit or other transaction cards is provided with an interface unit for receiving a plurality of modules, wherein each module contains programming information corresponding to transactions that may be carried out with at least one of the diverse identification cards presented to the machine. Accordingly, financial institutions who issue cards can independently arrange and program their own security and transaction routines which are to be carried out with the cards and distribute such routines in a secure manner for use on a common terminal.

Claims

1. A program module for use in equipment of the type accepting personal identification devices each device having identification data for selecting the program module and means for authenticating the selected program module, wherein said equipment includes a first interface means for receiving said personal identification devices and for generating first data signals corresponding to the stored identification data;

a second interface means with at least one connector means for detachably receiving said program module; and

processor means for transferring authenticating instructions between said personal identification device and the selected program module connected to said connector means;

said program module comprising;

a module microprocessor for generating and receiving said authenticating instructions to and from said personal identification device;

module connector means for connecting said module microprocessor to said connector means for communication with said processor means;

a module program for operating said module microprocessor; and

program means for authenticating said personal identification device.