Personal access management system

• US 5,696,825 A
• Filed: 02/13/1995
• Issued: 12/09/1997
• Est. Priority Date: 02/13/1995
• Status: Expired due to Fees

• Current Assignee: Cyphercomm Incorporated
• Original Assignee: ETA Technologies Corp.
• Inventors: Johnson, William Cedric, McMullen, Charles C.
• Primary Examiner(s): Barron, Jr., Gilberto
• Application Number:
  US08/388,272
• Time in Patent Office: 1,030 Days
• Field of Search: 380/3, 380/4, 380/23-25
• US Class Current: 713/193
• CPC Class Codes: G06F 21/79 in semiconductor storage media, e.g. directly-addressable memories
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00

Abstract

A multi-component system for linking a user to a product or service provider includes a user processing device, a storage device, and a provider device. The storage device stores provider-specific application software, user-specific data, and a file management program. The storage device and the processing device are coupled to each other to form a user device which communicates with the provider device. Under direction of the file management program, the processing device carries out a recognition methodology which determines whether the processing device and the storage device are authorized to operate with each other. This aspect of the system makes it possible to render the storage device operable only with a specific user processing device, referred to as the principal processing device. This, in turn, reduces the possibility of fraud since the storage device cannot be used without the principal processing device. Once it is determined that the processing and storage devices are authorized to interact with each other, the processing device executes the provider-specific application software to exchange information with the provider device. Together, the user and provider devices implement unique recognition and comprehension methodologies to ensure that the parties are authorized to communicate with each other and to ensure that the information exchanged cannot be understood by third parties. Overall, the system provides a highly secure mechanism for transferring information from one party to another.

Claims

1. In a system comprising an initialized processing device having a set of processed parameters and a master key code stored therein, and uninitialized storage device, a method for initializing the storage device, comprising the steps of:

generating a processing device key code;

processing said set of processed parameters using said processing device key code to derive a set of de-processed parameters;

retrieving said master key code from the processing device;

processing said set of de-processed parameters using said master key code to derive a new set of processed parameters; and

storing said new set of processed parameters onto the storage device to initialize the storage device.

2. The method of claim 1, wherein the step of processing said set of processed parameters comprises the step of:

decrypting said set of processed parameters using said processing device key code as a decryption key.

3. The method of claim 1, wherein the step of processing said set of de-processed parameters comprises the step of:

encrypting said set of de-processed parameters using said master key code as an encryption key.

4. The method of claim 1, wherein the processing device further has an identification code stored/herein, and wherein said method further comprises the steps of:

processing said identification code using said master key code to derive a processed identification code; and

storing said processed identification code onto the storage device.

5. The method of claim 4, wherein the step of processing said identification code comprises the step of:

encrypting said identification code using said master key code as an encryption key.

6. In a system comprising an initialized processing device having a set of processed parameters stored therein, and an uninitialized storage device, a method for initializing the storage device, comprising the steps of:

generating a processing device key code;

processing said set of processed parameters using said processing device key code to derive a set of de-processed parameters;

generating a master key code;

processing said set of de-processed parameters using said master key code to derive a new set of processed parameters; and

storing said new set of processed parameters onto the storage device to initialize the storage device.

7. The method of claim 6, wherein the step of processing said set of processed parameters comprises the step of:

decrypting said set of processed parameters using said processing device key code as a decryption key.

8. The method of claim 6, wherein the step of processing said set of de-processed parameters comprises the step of:

encrypting said set of de-processed parameters using said master key code as an encryption key.

9. The method of claim 6, wherein the processing device further has an identification code stored therein, and wherein said method further comprises the steps of:

processing said identification code using said master key code to derive a processed identification code; and

storing said processed identification code onto the storage device.

10. The method of claim 9, wherein the step of processing said identification code comprises the step of:

encrypting said identification code using said master key code as an encryption key.

11. In a system comprising an initialized processing device having a set of processed parameters and a master key code stored therein, and an uninitialized storage device, a method for initializing the storage device, comprising the steps of:

receiving a dynamic personal identification number (DPIN) from a user;

verifying that said DPIN is correct;

in response to a determination that said DPIN is correct, generating a processing device key code using said DPIN;

processing said set of processed parameters using said processing device key code to derive a set of de-processed parameters;

retrieving said master key code from the processing device;

processing said set of de-processed parameters using said master key code to derive a new set of processed parameters; and

storing said new set of processed parameters into the storage device to initialize the storage device.

12. The method of claim 11, wherein the step of processing said set of processed parameters comprises the step of:

decrypting said set of processed parameters using said processing device key code as a decryption key.

13. The method of claim 11, wherein the step of processing said set of de-processed parameters comprises the step of:

encrypting said set of de-processed parameters using said master key code as an encryption key.

14. The method of claim 11, wherein the processing device has an identification code stored therein, and wherein said method further comprises the steps of:

processing said identification code using said master key code to derive a processed identification code; and

storing said processed identification code onto the storage device.

15. The method of claim 14, wherein the step of processing said identification code comprises the step of:

encrypting said identification code using said master key code as an encryption key.

16. The method of claim 11, wherein the step of generating said processing device key code comprises the steps of:

modifying said DPIN to derive a modified DPIN;

generating a processing device hash code using said modified DPIN; and

generating said processing device key code using said processing device hash code.

17. The method of claim 16, wherein said processing device hash code is generated using a hashing algorithm known as the Secure Hash Algorithm (SHA).

18. The method of claim 16, wherein the processing device has an identification code stored therein, and wherein the step of modifying said DPIN comprises the step of:

combining said identification code with said DPIN to derive said modified DPIN.

19. The method of claim 16, further comprising the step of:

storing said processing device hash code onto the storage device.

20. The method of claim 11, wherein the processing device further has reference information stored therein, and wherein the step of verifying said DPIN comprises the steps of:

generating a verification parameter using said DPIN; and

comparing said verification parameter to said reference information to determine whether said DPIN is correct.

21. The method of claim 20, wherein the step of verifying said DPIN further comprises the step of:

in response to a determination that said DPIN is incorrect, terminating interaction between the processing device and the storage device.

22. The method of claim 20, wherein the step of generating said verification parameter comprises the steps of:

generating a master hash code using said DPIN; and

providing said master hash code as said verification parameter.

23. The method of claim 22, wherein said master hash code is generated using a hashing algorithm known as the Secure Hash Algorithm (SHA).

24. A storage device for interacting with a processing device having a set of processed parameters and a master key code stored therein, said storage device comprising:

a first storage unit;

means for causing the processing device to generate a processing device key code;

means for causing the processing device to process said set of processed parameters using said processing device key code to derive a set of de-processed parameters;

means for causing the processing device to retrieve said master key code from the processing device;

means for causing the processing device to process said set of de-processed parameters using said master key code to derive a new set of processed parameters; and

means for causing the processing device to store said new set of processed parameters into said first storage unit to initialize said storage device.

25. The storage device of claim 24, wherein the processing device further has an identification code stored therein, and wherein said storage device further comprises:

a second storage unit;

means for causing the processing device to process said identification code using said master key code to derive a processed identification code; and

means for causing the processing device to store said processed identification code into said second storage unit.

26. A storage device for interacting with a processing device having a set of processed parameters stored therein, said storage device comprising:

a first storage unit;

means for causing the processing device to generate a processing device key code;

means for causing the processing device to process said set of processed parameters using said processing device key code to derive a set of de-processed parameters;

means for causing the processing device to generate a master key code;

means for causing the processing device to process said set of de-processed parameters using said master key code to derive a new set of processed parameters; and

means for causing the processing device to store said new set of processed parameters into said first storage unit to initialize said storage device.

27. The storage device of claim 26, wherein the processing device further has an identification code stored therein, and wherein said storage device further comprises:

a second storage unit;

means for causing the processing device to process said identification code using said master key code to derive a processed identification code; and

means for causing the processing device to store said processed identification code into said second storage unit.

28. A storage device for interacting with a processing device having a set of processed parameters and a master key code stored therein and a user interface, said storage device comprising:

a first storage unit;

means for causing the processing device to receive a dynamic personal identification number (DPIN) from a user via the user interface;

means for causing the processing device to verify that said DPIN is correct;

means for causing the processing device to generate, in response to a determination that said DPIN is correct, a processing device key code using said DPIN;

means for causing the processing device to process said set of processed parameters using said processing device key code to derive a set of de-processed parameters;

means for causing the processing device to retrieve said master key code from the processing device;

means for causing the processing device to process said set of de-processed parameters using said master key code to derive a new set of processed parameters; and

means for causing the processing device to store said new set of processed parameters into said first storage unit to initialize said storage device.

29. The storage device of claim 28, wherein the processing device further has an identification code stored therein, and wherein said storage device further comprises:

a second storage unit;

means for causing the processing device to process said identification code using said master key code to derive a processed identification code; and

means for causing the processing device to store said processed identification code into said second storage unit.

30. The storage device of claim 28, wherein said means for causing the processing device to generate said processing device key code comprises:

means for causing the processing device to modify said DPIN to derive a modified DPIN;

means for causing the processing device to generate a processing device hash code using said modified DPIN; and

means for causing the processing device to generate said processing device key code using said processing device hash code.

31. The storage device of claim 30, wherein the processing device further has an identification code stored therein, and wherein said means for causing the processing device to modify said DPIN comprises:

means for causing the processing device to combine said identification code with said DPIN to derive said modified DPIN.

32. The storage device of claim 30, further comprising:

a second storage unit;

means for causing the processing device to store said processing device hash code into said second storage unit.

33. The storage device of claim 28, wherein the processing device further has reference information stored therein, and wherein said means for causing the processing device to verify said DPIN comprises:

means for causing the processing device to generate a verification parameter using said DPIN;

means for causing the processing device to compare said verification parameter to said reference information to determine whether said DPIN is correct; and

means for causing the processing device to terminate interaction between the processing device and said storage device in response to a determination that said DPIN is incorrect.

34. The storage device of claim 33, wherein said means for causing the processing device to generate said verification parameter comprises:

means for causing the processing device to generate a master hash code using said DPIN, said master hash code representing said verification parameter.

35. A processing assembly, comprising:

a processing device comprising a processor, a memory coupled to said processor having a set of processed parameters and a master key code stored therein, and a storage device interface coupled to said processor for receiving one of a number of individual storage devices; and

a storage device for coupling to said storage device interface, said storage device comprising;

a first storage unit;

means for causing said processor to generate a processing device key code;

means for causing said processor to process said set of processed parameters using said processing device key code to derive a set of de-processed parameters;

means for causing said processor to retrieve said master key code from said memory;

means for causing said processor to process said set of de-processed parameters using said master key code to derive a new set of processed parameters; and

means for causing said processor to store said new set of processed parameters into said first storage unit to initialize said storage device.

36. The processing assembly of claim 35, Wherein said memory further has an identification code stored therein, and wherein said storage device further comprises:

a second storage unit;

means for causing said processor to process said identification code using said master key code to derive a processed identification code; and

means for causing said processor to store said processed identification code into said second storage unit.

37. A processing assembly, comprising:

a processing device comprising a processor, a memory coupled to said processor having a set of processed parameters stored therein, and a storage device interface coupled to said processor for receiving one of a number of individual storage devices; and

a storage device for coupling to said storage device interface, said storage device comprising;

a first storage unit;

means for causing said processor to generate a processing device key code;

means for causing said processor to process said set of processed parameters using said processing device key code to derive a set of de-processed parameters;

means for causing said processor to generate a master key code;

means for causing said processor to process said set of de-processed parameters using said master key code to drive a new set of processed parameters; and

means for causing said processor to store said new set of processed parameters into said first storage unit to initialize said storage device.

38. The processing assembly of claim 37, wherein said memory further has an identification code stored therein, and wherein said storage device further comprises:

a second storage unit;

means for causing said processor to process said identification code using said master key code to derive a processed identification code; and

means for causing said processor to store said processed identification code into said second storage unit.

39. A processing assembly, comprising:

a processing device comprising a processor, a memory coupled to said processor having a set of processed parameters and a master key code stored therein, a user interface coupled to said processor, and a storage device interface coupled to said processor for receiving one of a number of individual storage devices; and

a storage device for coupling to said storage device interface, said storage device comprising;

a first storage unit;

means for causing said processor to receive a dynamic personal identification number (DPIN) from a user via said user interface;

means for causing said processor to verify that said DPIN is correct;

means for causing said processor to generate, in response to a determination that said DPIN is correct, a processing device key code using said DPIN;

means for causing said processor to process said set of processed parameters using said processing device key code to derive a set of de-processed parameters;

means for causing said processor to retrieve said master key code from said memory;

means for causing said processor to process said set of de-processed parameters using said master key code to derive a new set of processed parameters; and

means for causing said processor to store said new set of processed parameters into said first storage unit to initialize said storage device.

40. The processing assembly of claim 39, wherein said memory further has an identification code stored therein, and wherein said storage device further comprises:

a second storage unit;

means for causing said processor to process said identification code using said master key code to derive a processed identification code; and

means for causing said processor to store said processed identification code into said second storage unit.

41. The processing assembly of claim 39, wherein said means for causing said processor to generate said processing device key code comprises:

means for causing said processor to modify said DPIN to derive a modified DPIN;

means for causing said processor to generate a processing device hash code using said modified DPIN; and

means for causing said processor to generate said processing device key code using said processing device hash code.

42. The processing assembly of claim 41, wherein said memory further has an identification code stored therein, and wherein said means for causing said processor to modify said DPIN comprises:

means for causing said processor to combine said identification code with said DPIN to derive said modified DPIN.

43. The processing assembly of claim 41, wherein said storage device further comprises:

a second storage unit;

means for causing said processor to store said processing device hash code into said second storage unit.

44. The processing assembly of claim 39, wherein said memory further has reference information stored therein, and wherein said means for causing said processor to verify said DPIN comprises:

means for causing said processor to generate a verification parameter using said DPIN;

means for causing said processor to compare said verification parameter with said reference information to determine whether said DPIN is correct; and

means for causing said processor to terminate interaction with said storage device in response to a determination that said DPIN is incorrect.

45. The processing assembly of claim 44, wherein said means for causing said processor to generate said verification parameter comprises:

means for causing said processor to generate a master hash code using said DPIN, said master hash code representing said verification parameter.