Old modified smart card or similar apparatus having a remote inspection capability

• US 5,737,423 A
• Filed: 08/23/1995
• Issued: 04/07/1998
• Est. Priority Date: 08/23/1995
• Status: Expired due to Term

• Current Assignee: Pitney Bowes Incorporated (Böwe Systec AG)
• Original Assignee: Pitney Bowes Incorporated (Böwe Systec AG)
• Inventors: Manduley, Flavio M.
• Primary Examiner(s): Tarcza, Thomas H.
• Assistant Examiner(s): White, Carmen D.
• Application Number:
  US08/518,212
• Time in Patent Office: 958 Days
• Field of Search: 455/68, 455/70, 340/539, 340/546, 235/380, 235/384, 380/25, 380/49
• US Class Current: 705/67
• CPC Class Codes: G06K 19/0723 the record carrier comprising an arrangement for non-contact communication, e.g. wireless communication circuits on transponder cards, non-contact smart cards or RFIDs
• CPC Class Codes: G06K 19/07703 the interface being visual
• CPC Class Codes: G06Q 20/363 with the personal data of a user
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G07F 7/0866 by active credit-cards adapted therefor G07F7/1008 takes precedence

Abstract

An apparatus and method for remote inspection of a smart card or similar apparatus. A smart card includes an antenna and receiver for receiving transmitted messages and a display. The smart card responds to a response request message to display a secure output message prompting a user of the smart card to respond to the party originating the message. When a valid response is received a response confirmation message is transmitted to the smart card. If a response is not received or is invalid a deactivate command message is transmitted to the smart card. If a response request message is not received within a first time period, or if a response confirmation is not received within a second time period after a response request is received, or if an attempt is made to use the card after a response request is received and before a response confirmation is received, the card will deactivate itself.

Claims

1. A method for inspecting an apparatus, said apparatus having a capability to decode and respond to a response request message transmitted to said apparatus by generating and displaying a secure output message, and also having an automatic deactivation capability, said method comprising the steps of:

a) transmitting said response request message addressed to said apparatus, said secure output message prompting an authorized possessor of said apparatus to send a response reflecting said secure output message to an originator of said response request message;

b) if a message reflecting said secure output message is not received before the occurrence of a predetermined event, automatically controlling said apparatus to deactivate; and

c. if said message reflecting said secure output message is received before the occurrence of said predetermined event, transmitting a response confirmation message addressed to said apparatus and thereafter ignoring occurrence of said predetermined event.

2. A method as described in claim 1 wherein said predetermined event is transmission of a deactivate command message addressed to said apparatus.

3. A method as described in claim 1 wherein said predetermined event is an attempt to transact an information exchange with said apparatus.

4. A method as described in claim 1 wherein said predetermined event is passage of a predetermined time interval.

5. A method as described in claim 1 wherein said secure output message comprises an encryption of information pertaining to a history of information exchange transactions using said apparatus and said apparatus responds to receipt of said response confirmation message to update an encryption key used to generate said encryption.

6. A method as described in claim 5 wherein said transactions relate to a transfer of encrypted tokens representative of value to or from said apparatus.

7. A method as described in claim 6 wherein said apparatus comprises a plastic body having a microprocessor system embedded therein.

10. An apparatus as described in claim 4 wherein said transactions relate to a transfer of encrypted tokens representative of value to or from said apparatus.

11. An apparatus as described in claim 10 wherein said apparatus is a modified smart card.

8. A portable apparatus comprising:

a) an antenna;

b) a receiver responsive to said antenna for receiving transmitted messages;

c) decoder means responsive to said receiver for decoding said transmitted messages;

d) input/output means for inputting information to, and outputting information from, said apparatus;

e) data processing means responsive to said input/output means for transacting information exchanges with external devices and responsive to said decoder means for generating output messages; and

f) display means for displaying said output messages;

wherein

g) said processing means is further for;

g1) responding to a first decoded, response request message to generate a secure output message; and

g2) responding to a predetermined event occurring after receipt of said response request message to deactivate said apparatus;

wherein

h) wherein said output message prompts an authorized possessor of said apparatus to send a response reflecting said secure output message to an originator of said response request message; and

i) said processing means is further for responding to a second decoded, response confirmation message to thereafter ignore occurrence of said predetermined event.

9. An apparatus as described in claim 8 wherein said secure message comprises an encryption of information pertaining to a history of information exchange transactions using said apparatus and said processing means further responds to receipt of said response confirmation message to update an encryption key used to generate said encryption.

12. An apparatus as described in claim 8 wherein said predetermined event is receipt of a deactivate command message by said apparatus.

13. An apparatus as described in claim 8 wherein said predetermined event is an attempt to transact an information exchange with said apparatus.

14. An apparatus as described in claim 8 wherein said predetermined event is passage of a predetermined time interval.

15. An apparatus as described in claim 8 wherein said information exchanges relate to a transfer of encrypted tokens representative of value to or from said apparatus.

16. An apparatus as described in claim 15 wherein said apparatus is a modified smart card.