Process for protection against fraudulent use of smart cards, and device for use of the process

• US 5,162,638 A
• Filed: 10/31/1990
• Issued: 11/10/1992
• Est. Priority Date: 11/03/1989
• Status: Expired due to Term

• Current Assignee: Laboratoire Europeen de Recherches Electroniques Avancees Societe EN NOM Collectif
• Original Assignee: Laboratoire Europeen de Recherches Electroniques Avancees Societe EN NOM Collectif
• Inventors: Diehl, Eric, Leduc, Michel, Hamon, Joel
• Primary Examiner(s): Shepperd, John W.
• Assistant Examiner(s): Nguyen, Tan
• Application Number:
  US07/606,859
• Time in Patent Office: 741 Days
• Field of Search: 235/380, 235/375, 235/382, 235/492, 283/70, 283/74, 283/75, 283/904, 340/825.31, 340/825.34, 380/23, 380/24, 380/25
• US Class Current: 235/380
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/363 with the personal data of a user
• CPC Class Codes: G06Q 20/4097 using mutual authentication between devices and transaction partners
• CPC Class Codes: G07C 9/29 the pass containing active electronic elements, e.g. smartcards
• CPC Class Codes: G07F 7/0866 by active credit-cards adapted therefor G07F7/1008 takes precedence
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/125 Offline card verification

Abstract

To prevent a person having found or stolen a card of a pay-television subscriber from using it fraudulently, the identity of the subscriber is recorded in a zone protected from reading and writing. At the beginning of the period of use of a new card, the new card compares the identity of the new card with that of the old one, and delivers the password only if the two identities are the same.

Claims

1. A process for validating a new smart card after an end of period of validity of an old smart card in a system of distribution of one of goods and services, wherein said system includes at least one management center and at least one terminal connected to said center, said process comprising the steps of:

assigning an identity to each user which identity is memorized in at least two cards sent to said user; and

verifying at the end of the period of validity of said old card that a new card has the same identity as said old card, wherein said terminal reading and transmitting the identity of said old card to said new card which is inserted into said terminal after said old card has been withdrawn from said terminal; and

at least one field is reserved in the cards for memorization of unique data relative to the identity of the user and wherein it is checked in said cards that when the users start to use said new card, said field of the new card is identical to that of the old card.

2. A process for validating a new smart card after an end of period of validity of an old smart card in a system of distribution of one of goods and services, wherein said system includes at least one management center and at least one terminal connected to said center, said process comprising the steps of:

assigning an identity to each user which identity is memorized in at least two cards sent to said user; and

verifying at the end of the period of validity of said old card that a new card has the same identity as said old card, wherein said terminal reading and transmitting the identity of said old card to said new card which is inserted into said terminal after said old card has been withdrawn from said terminal; and

during the renewal of a card account, it is verified that the new card has not previously been initialized.

3. Process according to claim 2, wherein the initialization of a card, after it has been checked that the user possesses a previous card and a new card with the same identity, consists in irreversibly modifying a secret datum in the new card.

4. A process for validating a new smart card after an end of period of validity of an old smart card in a system of distribution of one of goods and services, wherein said system includes at least one management center and at least one terminal connected to said center, said process comprising the steps of:

assigning an identity to each user which identity is memorized in at least two cards sent to said user; and

verifying at the end of the period of validity of said old card that a new card has the same identity as said old card, wherein said terminal reading and transmitting the identity of said old card to said new card which is inserted into said terminal after said old card has been withdrawn from said terminal; and

on first use of a new card, the user must input a secret code number.