Method, apparatus, system and firmware for secure transactions

• US 5,748,740 A
• Filed: 01/31/1996
• Issued: 05/05/1998
• Est. Priority Date: 09/29/1995
• Status: Expired due to Fees

• Current Assignee: Maxim Integrated Products, Inc. (Analog Devices, Inc.)
• Original Assignee: Dallas Semiconductor Corporation (Analog Devices, Inc.)
• Inventors: Loomis, Donald W., Curry, Stephen M., Fox, Christopher W.
• Primary Examiner(s): Gregory, Bernarr E.
• Application Number:
  US08/594,983
• Time in Patent Office: 825 Days
• Field of Search: 380/4, 380/9, 380/21, 380/23, 380/24, 380/25, 380/30, 380/46, 380/49, 380/50, 235/379, 235/380
• US Class Current: 705/65
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/4093 Monitoring of device authentication
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G07F 7/0826 Embedded security module
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00
• CPC Class Codes: H04L 2209/34 Encoding or coding, e.g. Huffman coding or error correction
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/3297 involving time stamps, e.g. generation of time stamps

Abstract

The present invention relates to an electronic module used for secure transactions. More specifically, the electronic module is capable of passing information back and forth between a service provider'"'"'s equipment via a secure, encrypted technique so that money and other valuable data can be securely passed electronically. The module is capable of being programmed, keeping track of real time, recording transactions for later review, and creating encryption key pairs.

Claims

1. An electronic data carrier used for secure transactions comprising:

input/output circuitry for communicating to a data processing circuit;

math coprocessor circuitry electrically connected to said input/output circuitry where said math coprocessor performs encryption calculations;

microprocessor circuitry electrically connected to said input/output circuitry; and

memory circuitry electrically connected to said microprocessor circuitry, said electronic data carrier providing secure, encrypted data transfers between said electronic data carrier and said data processing circuit.

2. The electronic data carrier of claim 1, wherein said data processing circuit is another electronic.

3. The electronic data carrier of claim 1, further comprising a one-wire interface connected to said input/output circuitry.

4. The electronic data carrier of claim 1, wherein said memory circuitry stores a private encryption/decryption key for use during the encrypted data transfers between said electronic data carrier and said data processing circuit.

5. The electronic data carrier of claim 1, wherein said encrypted transactions are time stamped.

6. The electronic data carrier of claim 1, wherein said electronic data carrier is incorporated into a portable item.

7. A system for communicating secure transactions, comprising:

a first module comprising;

input/output circuitry;

random number creating means for creating a random number; and

a first transaction group for requesting said random number creating means to create said random number and for providing said random number to said input/output circuitry; and

a service provider equipment comprising;

means for reading said random number from said input/output circuitry of said first module;

means for combining said random number with a first data and for encrypting the combination of said random number and said first data with a private key to produce a first certificate, whereby said input/output circuitry of said first module receives said first certificate.

8. The system of claim 7, wherein said service provider equipment comprises a second module.

9. The system of claim 7, wherein said first module further comprises an identifier for identifying said first module, and wherein said first transaction group provides said identifier to said input/output circuitry.

10. The system of claim 9, wherein said means for reading is further for reading said identifier from said input/output circuitry of said first module.

11. The system of claim 7, wherein said first module further comprises a second transaction group.

12. The system of claim 7, wherein said module further comprises a means for time stamping a complete transaction.

13. The system of claim 7, wherein said first module is incorporated into a portable item.

14. A method of communicating encrypted information between a data carrier and a service provider equipment, comprising the steps of:

a) creating a first random number in said data carrier;

b) passing said random number to said service provider equipment;

c) encrypting at least said random number with a private key in said service provider equipment thereby producing a certificate;

d) passing at least said certificate to said data carrier;

e) decrypting said certificate with a public key in said data carrier;

f) comparing said first random number with a number found in the decrypted first certificate of step e) to determine if the two numbers match.

15. The method of claim 14, wherein step b) further comprises the step of passing a data carrier identifier to said service provider equipment.

16. The method of claim 14, wherein said service provider equipment is another data carrier.

17. The method of claim 14, wherein said method incorporates a single wire bus.

18. The method of claim 17, wherein said single wire bus is substantially a one-wire bus.

19. The method of communicating encrypted information of claim 14, wherein said data carrier is incorporated into a portable item.

20. A method of communicating encrypted information between a data carrier and a service provider equipment, comprising the steps of:

a) creating a first random number in said service provider equipment;

b) passing said random number to said data carrier;

c) encrypting at least said random number with a private key in said data carrier thereby producing a first certificate;

d) passing at least said first certificate to said service provider equipment;

e) decrypting said first certificate with a public key in said service provider equipment;

f) comparing said first random number with a number found in the decrypted first certificate of step f) to determine if the two numbers match.

21. The method of claim 20, wherein said service provider equipment is another data carrier.

22. The method of claim 20, wherein said method incorporates a single wire bus.

23. The method of claim 20, wherein said single wire bus is substantially a one-wire bus.

24. The method of communicating encrypted information of claim 20, wherein said data carrier is incorporated into a portable item.

25. A method of decrypting encrypted data using a module, comprising the steps of:

receiving a first encrypted data and a second encrypted data;

decrypting said first encrypted data with a private key stored in said module, whereby a first decryption key is created;

providing said first decryption key to an electronic system;

decrypting said second encrypted data with said first decryption key via said electronic system, whereby a useful information is created.

26. The method of claim 25, wherein said encrypted data is an electronic mail message.

27. The method of decrypting encrypted data of claim 25, wherein said module is incorporated into a portable item.