Authenticator card and system

• US 5,450,491 A
• Filed: 08/26/1993
• Issued: 09/12/1995
• Est. Priority Date: 08/26/1993
• Status: Expired due to Term

• Current Assignee: AT&T IPM Corp. (AT&T, Inc.)
• Original Assignee: AT&T Corporation (AT&T, Inc.)
• Inventors: McNair, Bruce E.
• Primary Examiner(s): Swann, Tod R.
• Application Number:
  US08/112,165
• Time in Patent Office: 747 Days
• Field of Search: 380/23, 380/24, 380/25
• US Class Current: 713/184
• CPC Class Codes: G06K 19/06028 using bar codes
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G07F 7/08 by coded identity card or credit card or other personal identification means without personal verification means G07F7/02
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/12 Card verification
• CPC Class Codes: G07F 7/122 Online card verification

Abstract

An authenticator card includes a liquid crystal display arranged to exhibit a dynamically changeable bar code pattern that represents an account number and, optionally, a PIN and/or expiration date. The card includes circuitry for periodically changing the bar code in accordance with a predetermined algorithm. When the card is presented by a user to a merchant to authenticate the identity of the user in connection with a business transaction, the bar code is scanned by a conventional bar code reader. The code is convened to electronic form and transmitted to a verification processor to be authenticated. During authentication, a corresponding algorithm is used to validate information from the received signal, enabling a database query to determine validity of the card. Advantageously, the card can be mass produced at low cost, and a readily available bar code scanner provides a simple interface when the card is presented for authentication.

Claims

1. An authenticator system for authenticating the identity of a user having possession of an authenticator card, said system comprising

means for generating a pseudorandom, time varying code;

means responsive to said code generating means for converting said time varying code to a bar code;

means for displaying said bar code on an LCD display on said authenticator card; and

means for scanning said bar code at the time said authenticator card is used by said user to authenticate the identity of said user.

2. The invention defined in claim 1 wherein said code generating means is arranged to generate said time varying code as a function of the time of day.

3. The invention defined in claim 1 wherein said code generating means is arranged to generate said time varying code as a joint function of the time of day and of an encryption key.

4. The invention defined in claim 1 wherein said bar code is a series of generally parallel stripes of varying widths and separations displayed on a contrasting background.

5. A system for authenticating the identity of a user, comprising

an authenticator card arranged to display a dynamically changing bar code that varies in accordance with a pseudorandom code;

means for scanning said bar code at the time said authenticator card is used by said user;

means for applying information derived from said scanned bar code and information generated in accordance with said pseudorandom code to a processor to obtain a unique user ID for said authenticator card; and

means for comparing said unique user ID with stored information to authenticate the identity of said user.

6. The invention defined in claim 5 wherein said display includes an LCD display.

7. The invention defined in claim 5 wherein said authenticator card includes means for generating said dynamically changing bar code, comprising:

means for generating a pseudorandom, time varying code; and

means responsive to said code generating means for convening said time varying code to a bar code.

8. A method for authenticating the identity of a user through possession of an authenticator card, said method comprising the steps of:

generating a pseudorandom, time varying code;

converting said time varying code to a bar code;

displaying said bar code on an LCD display contained on said authenticator card; and

scanning said bar code at the time said authenticator card is used by said user to authenticate the identity of said user.

9. A method for authenticating the identity of a user, comprising the steps of:

displaying a dynamically changing bar code that varies in accordance with a pseudorandom code on an authenticator card of said user;

scanning said bar code at the time said authenticator card is used by said user;

applying information derived from said scanned bar code and information generated in accordance with said pseudorandom code to a processor to obtain a unique user ID for said authenticator card; and

comparing said unique user ID with stored information to authenticate the identity of said user.