Methods and apparatus for data encryption and transmission

• US 5,524,072 A
• Filed: 06/17/1994
• Issued: 06/04/1996
• Est. Priority Date: 12/04/1991
• Status: Expired due to Fees

• Current Assignee: Encotone Ltd.
• Original Assignee: Encotone Ltd.
• Inventors: Labaton, Isaac, Kelly, Michael K.
• Primary Examiner(s): CANGIALOSI, SALVATORE A
• Application Number:
  US08/244,584
• Time in Patent Office: 718 Days
• Field of Search: 380/23-25, 380/29, 380/21
• US Class Current: 705/72
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/108 Remote banking, e.g. home banking
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083

Abstract

The present invention provides methods and apparatus for the transmission of encrypted data along conventional telephone lines using various data transmission techniques, including known dual tone multi-frequency(DMTF) techniques. In accordance with a preferred embodiment of the invention, an exemplary apparatus for transmitting confidential information(data) comprises a portable hand-held module having the confidential data(e.g., credit card account numbers) and a predetermined encryption algorithm embedded therein. The apparatus which receives the encrypted transmission is equipped with an interface computer having decryption circuitry in which the inverse of the forgoing encryption algorithm is embedded.

Claims

1. A method of encrypting, transmitting, and decrypting an account number based on the use of a reversible mathematical algorithm, the algorithm being a function of time and date, and the algorithm having said account number as argument, the method comprising the steps of:

storing said account number in the memory of a hand-held special tone dialing (STD) device;

storing a first mathematical algorithm in the memory of said STD device;

storing a second algorithm, which second algorithm is the mathematical inverse of said first algorithm, in a central computer;

entering a personal identification number (PIN) onto a keypad of said STD device to thereby retrieve said account number and said first algorithm;

executing said first algorithm using the date and time of encryption to thereby encrypt said account number and the time and date of encryption as a function of said first algorithm;

applying, by said central computer, said second algorithm to said encrypted account number to thereby compute said account number as the result of said second algorithm being applied to said encrypted account number;

looking up at least a portion of said account number in an account data base maintained by said central computer to facilitate the authorization of a financial transaction involving the account to which said account number is associated; and

transmitting a response message from said central computer to said STD device relating to the authorization of said financial transaction.

2. The method of claim 1 wherein the time and date are the Greenwich Mean time and date.

3. The method of claim 1 wherein said applying step is synchronized to said executing step by use of a pre-set window of time.

4. The method of claim 1 wherein said account number includes said PIN.

5. The method of claim 1 wherein said account number includes an authentication number associated with said STD.

6. The method of claim 1 wherein said first and said second algorithms are each a function of date and time in terms of year, month, day of month, hour, minute, and second, such that said first algorithm implements a unique, non-repeating mathematical function each time it is executed.

7. An encryption and decryption system comprising a transmitting device and a receiving device wherein the transmitting device comprises:

a keypad for entering a PIN;

means for entering confidential information to be transmitted to said receiving device;

means for storing an authentication number which is unique for each transmitting device;

means for determining date and time;

means for computing a first reversible mathematical function in response to the entry of the personal identification number, said first function including the year, month, day, hour, and minute of encryption;

means for encrypting said consolidated information into a message based upon said first function;

means for transmitting said message and said authentication number to the receiving device;

a card writer circuit configured to write said message in a digital format onto a configurable magnetic strip associated with a dynamically reconfigurable transaction card; and

the receiving device comprises;

means for receiving said message and said authentication number from the transmitting device;

means for determining date and time;

means for computing a second mathematical function which is the mathematical inverse of said first function;

means for applying said second function to said message to thereby decrypt said message and reveal said confidential information;

means for storing a data base of authentication numbers; and

means for comparing said received authentication number to the data base of authentication numbers to thereby confirm the authenticity of said transmitting device; and

means for applying said confidential information to a data base of account numbers to facilitate the approval of a financial transaction.

8. The system of claim 7 wherein said transmitting means of said transmitting device is configured to transmit said confidential information through use of Dual Tone Multiple Frequency tones transmitted through regular telephone lines.

9. A system according to claim 7 including a plurality of similar transmitting devices, each one of the transmitting devices having a unique authentication number and at least one receiving device wherein all of the authentication numbers are stored in a data base, the authentication number being included within the encrypted information transmitted to the receiving device together with unencrypted information identifying the specific individual operating the transmitting device, the receiving device decrypting the encrypted information and comparing the decrypted authentication number with the corresponding authentication number for the specific transmitting device recorded in the data base.

10. The system of claim 7, further comprising:

a wallet-sized transaction card bearing a dynamically configurable magnetic strip for interaction with said card writing circuit of said transmitting device such that said card writing circuit writes said message onto said configurable magnetic strip; and

a point of sale (POS) device having a card swipe slot configured to receive said transaction card and read said message, the POS device being further configured to transmit said message to said receiving device along conventional telephone lines.

11. The system of claim 7, wherein:

said confidential information comprises a credit card account number;

said first function includes a natural logarithmic function of said credit card account number and a natural logarithmic function of at least a portion of said year, month, day, hour, and minute information.

12. The system of claim 7, wherein:

said confidential information comprises a credit card account number; and

said first function includes;

(i) one of a logarithmic and an exponential function of said credit card account number; and

(ii) one of a logarithmic and an exponential function of at least one of said year, month, day, hour, and minute information.