Secure transaction system and method utilized therein

• US 5,524,073 A
• Filed: 09/14/1993
• Issued: 06/04/1996
• Est. Priority Date: 11/17/1992
• Status: Expired due to Fees

• Current Assignee: Leon Stambler
• Original Assignee: Leon Stambler
• Inventors: Stambler, Leon
• Primary Examiner(s): CANGIALOSI, SALVATORE A
• Application Number:
  US08/122,071
• Time in Patent Office: 994 Days
• Field of Search: 380/4, 380/25, 380/24
• US Class Current: 705/75
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/347 Passive cards
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G07F 7/08 by coded identity card or credit card or other personal identification means without personal verification means G07F7/02
• CPC Class Codes: G07F 7/10 together with a coded signal , e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00
• CPC Class Codes: G07F 7/1066 PIN data being compared to data on card
• CPC Class Codes: G07F 7/12 Card verification
• CPC Class Codes: G07F 7/125 Offline card verification
• CPC Class Codes: G16H 20/10 relating to drugs or medications, e.g. for ensuring correct administration to patients
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083

Abstract

A transaction system is disclosed wherein, when a transaction, document or thing needs to be authenticated, information associated with one or more of the parties involved is coded together to produce a joint code. This joint code is then utilized to code information relevant to the transaction, document or record, in order to produce a variable authentication number (VAN) at the initiation of the transaction. This VAN is thereafter associated with the transaction and is recorded on the document or thing, along with the original information that was coded. During subsequent stages of the transaction, only parties capable of reconstructing the joint code will be able to uncode the VAN properly in order to re-derive the information. The joint code serves to authenticate the parties, and the comparison of the re-derived information against the information recorded on the document serves to authenticate the accuracy of that information.

Claims

1. A system for authenticating a transaction and at least one party to the transaction comprising:

means for receiving a first signal representative of a personal identification number (PIN) of the at least one party to the transaction, the PIN being unrecoverable within the system and for generating an encrypted signal derived from the PIN;

means for receiving the encrypted signal and a signal representative of predetermined non-secret information and for generating therefrom a signal representative of encoded authentication information;

means for receiving the signal representative of the encoded authentication information and a signal representative of information relevant to the transaction and for generating therefrom a signal representative of a variable authentication number (VAN);

means for associating the VAN with the transaction;

means for receiving a second signal representative of the PIN and a signal representative of the predetermined non-secret information and for deriving therefrom a signal representative of the encoded authentication information; and

means for authenticating the VAN associated with the transaction using the derived encoded authentication information and the information relevant to the transaction.

2. The system of claim 1, wherein the information relevant to the transaction comprises at least one information group which is coded to enable detection of a change in the content or structure of said information group.

3. The system of claim 1, wherein the transaction involves an electrical signal, the VAN being included in the electrical signal together with at least a portion of the information relevant to the transaction.

4. The system of claim 1, wherein the transaction includes originating an instrument and wherein the means for associating the VAN with the transaction records the VAN and at least a portion of the information relevant to the transaction on the instrument.

5. The system of claim 4, wherein the information relevant to the transaction comprises a combination of predetermined information recorded on the instrument and predetermined information not recorded on the instrument, such that prevention of fraudulent regeneration of the VAN is enhanced.

6. The system of claim 1, wherein the means for authenticating the VAN comprises:

first means for uncoding the VAN using at least the derived encoded authentication information; and

second means for comparing the uncoded VAN to the information relevant to the transaction and for

authenticating the VAN and the transaction associated with the VAN only if the uncoded VAN corresponds to the information relevant to the transaction.

7. The system of claim 1, wherein the means for authenticating the VAN comprises:

first means for coding the information relevant to the transaction using at least the derived encoded authentication information to generate a second VAN; and

second means for comparing the first VAN associated with the transaction to the second VAN and for

authenticating the first VAN and the transaction associated with the first VAN only if the first VAN corresponds to the second VAN.

8. The system of claim 1, wherein the transaction comprises originating and processing a medical prescription form and the parties comprise an originating physician and a patient presenting the medical prescription form for processing in a processing jurisdiction, the encoded authentication information being associated with the originating physician and with the patient, and wherein the VAN is associated with the transaction by recording the VAN on the medical prescription form.

9. The system of claim 8, further comprising:

means for authenticating the patient; and

wherein

the medicine is dispensed as indicated on the medical prescription form to the patient only if the VAN and the patient are authenticated.

10. The system of claim 9, wherein the means for authenticating the VAN is located at a processing entity associated with the processing jurisdiction, and wherein:

if the originating physician is not licensed to practice in the processing jurisdiction, authorization for processing the medical prescription form in the processing jurisdiction is obtained from a correspondent physician licensed in the processing jurisdiction and wherein the system further includes

means for generating a redemption VAN from the VAN and from information associated with the processing entity; and

means for associating the redemption VAN with the medical prescription form, such that the processing entity is accountable for the processing of the medical prescription form.

19. The system of claim 9, further comprising:

means for debiting an account of the patient for the patient amount of liability to pay for the medicine dispensed by an authorized dispenser having an account, the dispenser located in a processing jurisdiction;

means for debiting a co-payor'"'"'s account for a co-payor amount of liability; and

means for crediting the dispenser'"'"'s account by the sum of the debited amounts.

11. A system for authenticating a transaction and at least one party to the transaction comprising:

means for coding information relevant to a transaction with information associated with at least one party to the transaction for generating a variable authentication number (VAN), the information associated with the at least one party comprising encoded authentication information deriveable from a predetermined secret code and a predetermined non-secret code, the encoded authentication information being previously generated by encrypting a personal identification number (PIN which is unrecoverable within the transaction system;

means for associating the VAN with the transaction;

means for deriving the encoded authentication information using the predetermined secret code and the predetermined non-secret code; and

means for authenticating the VAN associated with the transaction by using the derived coded authentication information and the information relevant to the transaction.

12. A system for processing multiple party transactions comprising:

means for receiving a signal representative of information derived from a personal identification number (PIN) associated with at least one party to a transaction and for receiving a signal representative of other information relevant to the transaction and for generating therefrom a signal representative of a variable authentication number (VAN);

means for associating the VAN with the transaction;

means for receiving a signal representative of the PIN of a recipient party and for generating an encoded signal;

means for receiving the decoded signal and signals representative of the VAN and of the other information relevant to the transaction, for determining whether the recipient party and the transaction are authentic and for authorizing the transaction only if the recipient party and the transaction are authenticated.

13. The system of claim 12, further comprising:

means for coding a signal representative of information associated with at least one party with the signal representative of the VAN to generate therefrom a signal representative of a redemption VAN (RVAN);

means for associating the RVAN with the transaction, such that the transaction cannot be fraudulently presented for further redemption; and

means for storing the signal representative of the RVAN in a storage means associated with at least one party, such that the transaction is cleared in a substantially instantaneous manner.

14. The system of claim 13, wherein the transaction involves an electrical signal, the RVAN being included in the electrical signal.

15. A system for automatically and instantaneously transferring funds from an account associated with an originator party to an account associated with a recipient party comprising:

means for receiving from the originator party a personal identification number (PIN) associated with the originator party, information identifying the account of the originator party, information for identifying the account of the recipient party, and fund transfer information including a transfer amount;

means for generating a variable authentication number (VAN) using the PIN of the originator party, the information identifying the account of the recipient party, and the fund transfer information;

means for determining whether the originator party is authentic by using the PIN of the originator party;

means for determining whether the fund transfer information is authentic by using the VAN;

means for transferring funds from the account of the originator party to the account of the recipient party only if the originator party and the funds transfer information are both determined to be authentic;

means for generating a redemption variable authentication number (RVAN) after the funds have been transferred to the account of the recipient party, the RVAN being generated using at least the funds transfer information; and

means for associating the RVAN with the funds transfer such that the funds transfer is substantiated by the

16. The system of claim 15, wherein the means for associating the RVAN with the funds transfer records the RVAN on a receipt, the receipt being dispensed to the originator party.

17. A system for processing an invoice comprising:

means for generating a variable authentication number (VAN) using at least information associated with an invoice, the information associated with the invoice including information identifying an account of a payee party and payment information including at least a payment amount;

means for recording the VAN and the information associated with the invoice on the invoice;

means for receiving the VAN and a personal identification number (PIN) from a payor party to the invoice, the received PIN being unrecoverable in the system;

means for determining whether the payor party and the VAN are authentic by using the information associated with the invoice and the received PIN;

means for receiving from the invoice the information identifying the account of the payee party and the payment information; and

means for transferring the payment amount to the account of the payee party from funds associated with the payor party only if the payor party and the VAN are determined to be authentic.

18. The system of claim 17, further comprising:

means for generating a redemption VAN (RVAN) by encoding a signal representative of the VAN with a signal representative of at least information associated with the payee party; and

means for associating the RVAN with the invoice such that payment of the invoice is substantiated by the RVAN.