Method for authentication by an external medium of a portable object such as a memory card coupled to this medium

• US 5,153,581 A
• Filed: 02/07/1991
• Issued: 10/06/1992
• Est. Priority Date: 06/16/1986
• Status: Expired due to Term

• Current Assignee: CP8 Technologies (Thales SA)
• Original Assignee: Bull Sas (Atos SE)
• Inventors: Hazard, Michel
• Primary Examiner(s): Yusko, Donald J.
• Assistant Examiner(s): WEISSMAN, PETER
• Application Number:
  US07/652,372
• Time in Patent Office: 607 Days
• Field of Search: 340/325.34, 340/825.3, 340/825.31, 235/380, 235/382, 235/382.5
• US Class Current: 340/5.8
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

A method for authentication by an external medium of a portable object such as a standardized credit card coupled to this medium. The portable object (2) calculates a result (R) which is at least a function of a secret key (S) and of a variable datum (E). This result (R) is sampled by the external medium (1), which compares it with a reference result (RO). This result (RO) is changed in a random manner, by being replaced by a new result (RO) calculated by a portable object (2) which has been authenticated based on the preceding reference result.

Claims

1. A method of authenticating by an external medium of a portable object coupled to the external medium, the external medium (1) comprising first processing circuits (T10) and a first memory (M10) and the portable object (1) comprising second processing circuits (T2) and a second memory (M2), the method comprising furnishing a variable datum (E) from the eternal medium to the portable object;

calculating by the second processing circuits of the portable object a result (R) which is a predetermined function of a secret key (S) prerecorded in the second memory of the portable object and of the variable datum (E) furnished by the external medium;

transferring the result (R) to the external medium;

comparing, in the external medium, the result (R) with a previous result (Ra) recorded in the first memory and previously calculated by a portable object (2) previously coupled to the external medium, this previous result (Ra) having been calculated as said predetermined function of the same secret key (5) and the same variable datum (E);

authenticating the portable object in response to said comparing;

the method further comprising;

calculating initially a reference result (R0) as said predetermined function of the secret key and the variable datum (E);

recording the reference result (R0) in the first memory (M10) of the external medium;

authenticating a plurality of other portable objects subsequently coupled to the external medium, and each having the same secret key (S), by requiring a result (R) calculated by each such portable object using said variable datum (E) to be equal to the reference result (R0), and wherein said calculating initially the reference result (R0) comprises calculating the reference result by a portable reference object (2a) in the possession of an authorized person and coupled to the external medium, the method further comprising changing the variable datum (E) after the coupling of n portable objects, and

calculating, upon said changing of the variable datum, a new reference result (R0) based on the changed variable datum, such calculating being performed by the n th portable object (2) following authentication of said n th portable object based on a preceding reference result.

2. A method as defined by claim 1, wherein said furnishing comprises obtaining the variable datum (E) from a random number generator (GNA) of the external medium (1).

3. A method as defined by claim 1, further comprising changing the variable datum (E) after the coupling of n portable objects, n itself being variable.

4. A method as defined by claim 1 further comprising storing said variable datum in the first memory of the external medium, and wherein said transferring comprises transferring said variable datum to subsequent portable objects coupled to the external medium for authentication.

5. A method as defined by claim 1 further comprising storing data corresponding to each result and reference result in the first memory of said external medium.

6. A method of authenticating a portable object having a secret key (S) prerecorded therein and first processing circuits for performing a predetermined processing function by a terminal having a memory and second processing circuits, the method comprising furnishing from the memory of the terminal to the portable object a random datum (E);

calculating in the portable object as said predetermined function of the secret key prerecorded in the portable object and the random datum a first result (R);

transferring the first result to the terminal;

comparing in the second processing circuits of the terminal the first result with a second result (Ra) previously calculated by a portable object previously coupled to the terminal as said predetermined function of the same secret key and the same random datum and stored in the memory of the terminal; and

authenticating the portable object upon said first and second results matching, wherein a plurality n of portable objects are authenticated using the same random datum, and the method further comprises, following authentication of an n th portable object, generating a new random datum;

furnishing the new random datum to the n th portable object;

calculating in the n th portable object a new result as said predetermined function of the secret key and the new random datum;

transferring the new result to the terminal; and

storing the new result in the memory in the terminal.

7. A method as defined by claim 6 further comprising authenticating a plurality of portable objects by repeating said furnishing, calculating, transferring, and comparing for each of said plurality of portable objects using the same random datum.

8. A method as defined by claim 6, wherein the secret key prerecorded in the portable object is not stored in said terminal, and wherein the second processing circuits of the terminal do not perform said predetermined function preformed by the first processing circuits of the portable object.

9. A method as defined by claim 6 further comprising storing the new random datum in the memory in the terminal for transfer to a subsequent portable object coupled to the terminal.