Combination pin pad and terminal

• US 5,493,613 A
• Filed: 09/13/1993
• Issued: 02/20/1996
• Est. Priority Date: 09/11/1992
• Status: Expired due to Term

• Current Assignee: International Verifact, Inc.
• Original Assignee: International Verifact, Inc.
• Inventors: Sutton, Charles R., Denno, Rodney G., Hemy, Martin F.
• Primary Examiner(s): Gregory, Bernarr E.
• Application Number:
  US08/119,484
• Time in Patent Office: 890 Days
• Field of Search: 235/379, 235/380, 380/4, 380/9, 380/23, 380/24, 380/25, 380/49, 380/50, 380/21, 380/29
• US Class Current: 705/73
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/74 operating in dual or compartmented mode, i.e. at least one secure mode
• CPC Class Codes: G06F 21/83 input devices, e.g. keyboards, mice or controllers thereof
• CPC Class Codes: G06F 21/84 output devices, e.g. displays or monitors
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2105 Dual mode as a secondary aspect
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G07F 19/20 Automatic teller machines [ATMs]
• CPC Class Codes: G07F 19/201 Accessories of ATMs
• CPC Class Codes: G07F 7/0826 Embedded security module
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00

Abstract

A secure terminal is disclosed which has a single keypad and display which is suitable as a debit terminal, as both confidential and nonconfidential information can be entered. Confidential information is entered in secure text mode whereas nonconfidential information is entered in clear text mode. The terminal defaults to secure text mode where all information is encrypted. In clear text mode all prompts are independently authenticated by a secure module prior to displaying of the prompt. Prompts for clear text mode are preprogrammed preferably with an Authentication Parameter which is confirmed by the secure module whenever that prompt is used in clear text mode. The invention is also directed to the methods for rendering a terminal and system secure for receiving confidential and nonconfidential information.

Claims

1. A transaction terminal comprising a tamper resistant secure module, a display, a keyboard and a non-secured portion, said tamper resistant secure module acting as an intermediary and controlling the communication of data and prompts between said keyboard, said display, and said non-secured portion of said terminal in either non-encrypted clear text mode or encrypted secure text mode, said keyboard allowing the entry of data, said non secured portion of said terminal having a predetermined group of prompts and authentication parameters where each prompt is paired with an authentication parameter and some of said paired prompts and authentication parameters are authorized for non-encrypted clear text mode and some of said paired prompt and authentication parameters are authorized for encrypted secure text mode, said tamper resistant secure module having confirmation means to independently confirm the prompt of a prompt pair received form said non-secured portion is a proper prompt for non-encrypted clear text mode prior to communication of said prompt to said display.

2. A transaction terminal as claimed in claim 1 wherein said confirmation means confirms the prompt of the prompt pair is a proper prompt by generating its own authentication parameter for the given prompt and only continuing in non-encrypted clear text mode if the generated authentication parameter equals the authentication parameter of said pair.

3. A transaction terminal as claimed in claim 2 wherein said terminal always defaults to encrypted secure text mode and each prompt in non-encrypted clear text mode is independently confirmed by said confirmation means prior to continuing in non-encrypted clear text mode.

4. A transaction terminal as claimed in claim 2 wherein said confirmation means independently confirms said authentication parameter by means of an algorithm using said prompt as one encryption key.

5. A transaction terminal as claimed in claim 4 wherein said tamper resistant secure module includes two additional encryption keys for said algorithm which are used in generation of said authentication parameter.

6. A transaction terminal as claimed in claim 5 wherein said two additional encryption keys are random numbers generated by said tamper resistant secure module.

7. A transaction terminal as claimed in claim 6 wherein said tamper resistant secure module includes decryption software by means of which an encrypted data transfer encryption key provided to said terminal is decrypted by said tamper resistant secure module to determine the data transfer key with said tamper resistant secure module using said data transfer encryption key to encrypt data in said encrypted secure text mode.

8. A transaction terminal as claimed in claim 7 wherein said tamper resistant secure module includes means for receiving pairs of data corresponding to a prompt and a authentication parameter for non-encrypted clear text mode, and means for confirming the received pairs are for non-encrypted clear text mode by using said data transfer encryption key and an algorithm to produce a secure module control parameter which must match the received authentication parameter of said pair for said prompt to be accepted and confirmed by said secure module and used in non-encrypted clear text mode.

9. A transaction terminal as claimed in claim 8 wherein said secure module includes means for generating its own separate control parameter for each prompt received for non-encrypted clear text mode and each prompt and separate control parameter are stored in said non secured portion of said terminal.

10. A point of purchase terminal comprising a display, a tamper resistant secure module, a keypad, a non secure module, a communication port for communicating with an outside source, said terminal operating in either a non-encrypted clear text mode where data is transmitted in a non encrypted form and in an encrypted secure text mode where data is transferred in an encrypted form, said secure module including means for receiving prompts for clear text mode and means for generating an authentication parameter for each prompt and means for transmitting and storing each paired prompt and authentication parameter in said non secure module, said non secure module including means for instructing said secure module to operate in clear text mode and to provide pairs of prompts and authentication parameters to said secure module in clear text mode, said secure module when operating in clear text mode including means for confirming each prompt by regenerating the authentication parameter for the prompt and only transmitting the prompt to said display terminal if the regenerated authentication parameter corresponds to the authentication parameter provided with the pair.

11. A terminal as claimed in claim 10 wherein said terminal includes in said secure module means for receiving additional inputted prompts and authentication parameters to be used in clear text mode and confirms each additional inputted prompt is authorized for clear text mode based on an evaluation of said authentication parameter by said means for confirming each prompt.

12. A terminal as claimed in claim 11 wherein said secure module, after confirming a received inputted prompt is authorized for clear text model uses said means for generating to pair said prompt with a new authentication parameter which pair is subsequently stored in said non secure module.

13. A transaction terminal comprising a tamper resistant security module, a non-secured portion, a display for displaying data for a user or displaying a prompt provided by said non-secured portion to request a user to input certain data, and a keypad through which a user can input data;

said tamper resistant security module, said display, said keypad and said non-secured portion cooperating to communicate data or prompts therebetween;

said tamper resistant security module acts as an intermediary and encrypts certain data when communicated between said keyboard, said display, and said non-secured portion of said terminal;

said non-secured portion controlling the general operation of the terminal and providing to said tamper resistant security module prompts and authentication parameters where each prompt is paired with a particular authentication parameter, said tamper resistant security module relaying data inputted at said keypad to said non-secured portion in a clear text mode where the data is not encrypted or in a secure text mode where the data is encrypted dependent upon the particular prompt and authentication parameter provided to said tamper resistant security module by said non secured portion;

said paired prompts and authentication parameters being stored in said non secured portion, and said tamper resistant security module having confirmation means which prior to any communication in clear text mode uses the provided prompt to generate an authentication parameter and operates in dear text mode if the generated authentication parameter corresponds to the authentication parameter provided with the prompt.

14. A transaction terminal as claimed in claim 13 wherein said confirmation means includes an algorithm and said provided prompt is used as an input for said algorithm which generates said generated authentication parameter.