Electronic cashless transaction system

• US 5,428,684 A
• Filed: 09/30/1992
• Issued: 06/27/1995
• Est. Priority Date: 09/30/1991
• Status: Expired due to Term

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: Hasebe, Takayuki, Akiyama, Ryota
• Primary Examiner(s): Swann, Tod R.
• Application Number:
  US07/953,375
• Time in Patent Office: 1,000 Days
• Field of Search: 235/379, 235/380, 235/382, 380/21, 380/23, 380/24, 380/25, 380/29, 380/49, 329/91, 329/97, 329/98
• US Class Current: 705/66
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3672 initialising or reloading thereof
• CPC Class Codes: G06Q 20/3676 Balancing accounts
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

A key control method is for use in an electronic cashless transaction system including at least a bank center, a store transaction terminal and an IC card being used as an electronic cashless transaction medium. The key control method comprises a step of having the bank center generate and code a first parameter for a transmission to the IC card; a step of having the IC card receive and decode the coded first parameter by using the first key, thereby reconstructing the first parameter issued by the bank center, perform a first operation on the first parameter and a password of a holder of the IC card, and store in a first register; a step of having the store transaction terminal send to the IC card a second parameter coded by a second key, when the holder inserts the IC card 11 into the store transaction terminal; a step of having the IC card decode the coded second parameter by using the second key, thereby reconstructing the second parameter received from the store transaction terminal, perform a second operation on the second parameter and the value stored in the first register, store a result of the second operation in the second register; and a step of decoding a value stored in the second register by using a coding session key stored in a memory of the IC card, thereby obtaining a key for an intended authentication.

Claims

1. A key control method for use in an electronic cashless transaction system including at least a bank center, a store transaction terminal and an IC card being used as an electronic cashless transaction medium, comprising:

a step of having said bank center generate and code a first parameter for a transmission to said IC card;

a step of having said IC card receive and decode said coded first parameter by using a first key, thereby reconstructing said first parameter issued by said bank center, perform a first arithmetic operation on said first parameter and a password of a holder of said IC card, and store in a first register as a first value;

a step of having said store transaction terminal send to said IC card a second parameter coded by a second key, when said holder inserts said IC card into said store transaction terminal;

a step of having said IC card decode said coded second parameter by using said second key, thereby reconstructing said second parameter received from said store transaction terminal, perform a second arithmetic operation on said second parameter and said first value stored in a first register, store a result of said second arithmetic operation in said second register; and

a step of decoding a second value stored in said second register by using a coding session key stored in a memory of said IC card, thereby obtaining a key for an intended authentication.

2. The key control method for use in an electronic cashless transaction system, according to claim 1, further comprising:

a step of having said IC card store a plurality of coding session keys in said memory;

a step of having said IC card receive data specifying one of said plurality of coding session keys store in said memory when said IC card receive said coded second parameter from said store transaction terminal, and decode the specified one of said plurality of coding session keys by using said second value stored in said second register, thereby obtaining said key for an intended authentication.

3. The key control method for use in an electronic cashless transaction system, according to claim 2, further comprising:

a step of having said bank center code said plurality of coding session keys by using said first key when said IC card stores said plurality of coding session keys in said memory;

a step of having said IC card decode a coded plurality of coding session keys received from said bank center by using said first key, and store in said memory.

4. The key control method for use in an electronic cashless transaction system, according to claim 3, wherein:

an automatic teller machine is provided between said bank center and said IC card for repeating communications between said bank center and said IC card; and

said bank center 44 supplies via the automatic teller machine to the IC card 42 said coded first parameter and said coded plurality of coding session keys.

5. The key control method for use in an electronic cashless transaction system, according to claim 4, wherein:

said bank center supplies via said automatic teller machine to said IC card said plurality of coding session keys for use in a predetermined duration.

6. The key control method for use in an electronic cashless transaction system, according to claim 1, wherein:

said store transaction terminal supplies to said IC card a plurality of coded second parameters for use in a predetermined duration by coding them by using a master key.

7. The key control method for use in an electronic cashless transaction system, according to claim 1, wherein said bank center:

codes said first parameter in correspondence with a first identification number provided in said IC card;

stores in a holder account file of said holder having said IC card; and

supplies said coded first parameter on receiving said first identification number from said IC card.

8. The key control method for use in an electronic cashless transaction system, according to claim 7, wherein:

said first parameter is a random number generated by said bank center.

9. The key control method for use in an electronic cashless transaction system, according to claim 1, wherein:

said key for an intended authentication is used for an amount replenishment to said IC card.

10. The key control method for use in an electronic cashless transaction system, according to claim 1, wherein:

said IC card generates a random number, and codes it by using said key for an intended authentication for a transmission to said bank center;

said bank center decodes said coded random number by using said key for an intended authentication, thereby reconstructing said random number, codes said random number by said first key for a return transmission to said IC card;

said IC card decodes said coded random number returned from said bank center by using said first key, thereby reconstructing said random number for a comparison of said reconstructed random number with said random number before said coding by using said key for an intended authentication.

11. The key control method for use in an electronic cashless transaction system, according to claim 1, wherein:

said first operation is an addition between said parameter and said password.

12. The key control method for use in an electronic cashless transaction system, according to claim 1, wherein:

said second operation is an addition between decoded second parameter and the first value stored in said first register.

13. The key control method for use in an electronic cashless transaction system, according to claim 1, wherein:

said IC card supplies said second identification number to said store transaction terminal, when said IC card is inserted into a slot of said store transaction terminal; and

said store transaction terminal supplies to said IC card said second parameter coded in correspondence with said second identification number.

14. The key control method for use in an electronic cashless transaction system, according to claim 1, wherein:

said store transaction terminal stores accumulated transaction data and an authenticator specific for said IC card; and

said IC card, when said IC card is inserted into a slot of said store transaction terminal, adds new transaction data to said accumulated transaction data, codes the sum of said accumulated transaction data and said new transaction data, and supplies to said store transaction terminal said new sum and said coded sum.