Transaction authentication system

• US 5,097,115 A
• Filed: 09/28/1989
• Issued: 03/17/1992
• Est. Priority Date: 10/03/1988
• Status: Expired due to Term

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: Ozaki, Yoshiyuki, Ogasawara, Nobuo
• Primary Examiner(s): PITTS, HAROLD I
• Application Number:
  US07/413,748
• Time in Patent Office: 901 Days
• Field of Search: 235/379, 235/380, 235/492, 902/2, 380/24
• US Class Current: 235/380
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/4093 Monitoring of device authentication
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

A transaction authentication system comprises a terminal, a first memory and an IC card which is detachably loaded into the terminal. The terminal supplies at least transaction data which is related to a transaction a designated storage region in a second memory stores the transaction data to the IC card when the IC card accesses to a service via the terminal. A second processor of the IC card writes the transaction data received from the terminal in the designated storage region of the second memory and generates a vertified data which is renewed every time the transaction data is written into the second memory. The verified data has a value in conformance with a predetermined generating algorithm and is stored in the second memory and also supplied to the terminal. A first processor of the terminal generates transaction historical information which includes at least the designated storage region, the transaction data and the vertified data and stores the transaction historical information in the first memory. Thus a transaction is authenticated from a corresponding of the verified data stored in the first memory and the verified data stored in the second memory.

Claims

1. A transaction authentication system comprising:

terminal means including;

first processing means; and

a card reader/writer;

a first memory means; and

an integrated circuit card which is detachably loaded into said card reader/writer, said integrated circuit card including;

second processing means; and

second memory means,

said terminal means supplying at least a transaction data which is related to a transaction and a designated storage region in said second memory means for storing the transaction data to said integrated circuit card when said integrated circuit card makes an access to a service via said terminal means,

said second processing means of said integrated circuit card writing the transaction data received from said terminal means in the designated storage region of said second memory means and generating a verified data which is renewed every time the transaction data is written into said second memory, said verified data having a value in conformance with a predetermined generating algorithm using the verified data stored previously in said second memory, said verified data being stored in said second memory means and also supplied to said terminal means,

said first processing means of said terminal means generating transaction historical information which includes at least the designated storage region, the transaction data and the verified data, and storing the transaction historical information in said first memory means, thereby a transaction being authenticated from a correspondence of the verified data stored in said first memory means and the verified data stored in said second memory means.

2. A transaction authentication system as claimed in claim 1, wherein said first memory means is connected to said terminal and is provided exclusively for said terminal means.

3. A transaction authentication system as claimed in claim 1, wherein said first memory means is coupled to said terminal means via communication means.

4. A transaction authentication system as claimed in claim 1, wherein said terminal means comprises a point-of-sales terminal.

5. A transaction authentication system as claimed in claim 1, wherein said integrated circuit card further comprises a terminal group which is coupled to said second processing means, said card reader/writer of said terminal means reading/writing serial data with respect to said integrated circuit card via said terminal group.

6. A transaction authentication system as claimed in claim 1, wherein said second processing means of said integrated circuit card generates a serial number as the verified data.

7. A transaction authentication system as claimed in claim 1, wherein said second processing means of said integrated circuit card generates an n-argument function as the verified data, where n=1, 2, . . . .

8. A transaction authentication system as claimed in claim 1, wherein said second processing means of said integrated circuit card generates, as the verified data, a value which is unique for each transaction.

9. A transaction authentication system as claimed in claim 1, wherein said second processing means of said integrated circuit card stores in said second memory means only a verified data which is generated with respect to a last transaction.

10. A transaction authentication system as claimed in claim 1, wherein said second memory means comprises a first memory for storing programs for carrying out processes on said second processing means and a second memory for storing data.

11. A transaction authentication system as claimed in claim 10, wherein said first memory comprises a read only memory and said second memory comprises an electrically erasable programmable read only memory.

12. A transaction authentication system as claimed in claim 10, wherein said second memory means further comprises a third memory for providing a work area for said second processing means.

13. A transaction authentication system as claimed in claim 12, wherein said third memory comprises a random access memory.

14. A transaction authentication system as claimed in claim 1, wherein said second processing means includes means for setting a lock flag when an authenticate code, which is received from said terminal means and corresponds to a selected service, differs from an authenticate code stored in said second memory means a predetermined number of times, said first lock flay indicating that the selected service is non-accessible.

15. A transaction authentication system as claimed in claim 14, wherein said lock flag is set independently for each service.

16. A transaction authentication system as claimed in claim 1, wherein said second processing means comprises:

write means for writing the transaction data, which is received from said terminal means, into the designated storage region of said second memory means;

renewing means for renewing a transaction execution identifying information which is stored in said second memory means every time the transaction data is received from said terminal means; and

verified data generating means for generating the verified data based on the transaction execution identifying information read from said second memory means.

17. A transaction authentication system as claimed in claim 16, wherein said verified data generating means supplies the transaction execution identifying information, which is read from said second memory means, to said terminal means as the verified data.

18. A transaction authentication system as claimed in claim 1, wherein said second memory means stores card identification information, wherein said second processing means of said integrated circuit card supplies the card identification which is read from said second memory means together with the verified data, and wherein said first processing means of said terminal means generates the transaction historical information which also includes the card identification information.