Method, apparatus, and system for transferring units of value

• US 5,805,702 A
• Filed: 01/31/1996
• Issued: 09/08/1998
• Est. Priority Date: 09/29/1995
• Status: Expired due to Term

• Current Assignee: Maxim Integrated Products, Inc. (Analog Devices, Inc.)
• Original Assignee: Dallas Semiconductor Corporation (Analog Devices, Inc.)
• Inventors: Curry, Stephen M., Loomis, Donald W., Fox, Christopher W.
• Primary Examiner(s): Tarcza, Thomas H.
• Assistant Examiner(s): White, Carmen D.
• Application Number:
  US08/595,014
• Time in Patent Office: 951 Days
• Field of Search: 380/23, 380/24, 380/25, 380/30, 364/717, 364/464.02
• US Class Current: 705/66
• CPC Class Codes: G06Q 20/06 Private payment circuits, e.g. involving electronic currency used among participants of a common payment scheme
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3672 initialising or reloading thereof
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/4093 Monitoring of device authentication
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00
• CPC Class Codes: H04L 2209/34 Encoding or coding, e.g. Huffman coding or error correction
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/3249 using RSA or related signature schemes, e.g. Rabin scheme
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

The present invention relates to an electronic module used for secure transactions. More specifically, the electronic module is capable of passing encrypted information back and forth between a service provider'"'"'s equipment via a secure, encrypted technique so that money and other valuable data can be securely passed electronically. The module is capable of being programmed, keeping track of real time, recording transactions for later review, and creating encryption key pairs.

Claims

1. A method for adding a monetary equivalent to an electronic module, comprising the steps of:

a. placing the module in communication with an electronic device;

b. indicating an amount requested to said electronic device;

c. communicating a random number from said module to said electronic device;

d. combining said random number and said amount requested thereby creating a first data packet in said electronic device;

e. encrypting said first data packet with a first key thereby creating a signed certificate in said electronic device;

f. communicating said signed certificate from said electronic device to said module;

g. decrypting said signed certificate in said module with a second key thereby creating a decrypted random number and a decrypted amount requested;

h. comparing said random number with said decrypted random number and determining if they match in said module; and

i. adding said decrypted amount requested to a money register in said module.

2. The method of claim 1, further comprising, after step b, the step of communicating a module identification from said module to said electronic device.

3. The method of claim 2, wherein the step d of combining further comprises the step of combining said module indentification with said random number and said amount requested prior thereby creating said first data packet in said electronic device.

4. The method of claim 3, wherein the step of g of decrypting further comprises the step of creating a decrypted module identification.

5. The method of claim 4, wherein the step h of comparing further comprises the step of comparing said module identification and said decrypted module identification and determining if they match.

6. The method of claim 1, wherein said module is portable.

7. The method of claim 1, wherein said first key is a private key and said second key is a public key.

8. The method of claim 1, wherein said module is programmable.

9. Method of metering a monetary equivalent out of a module and into an electronic equipment, comprising the steps of:

a. placing said electronic equipment in communication with said module;

b. reading a module identifier with said electronic equipment;

c. combining a first random number, a number of units to be metered and said module identifier in said electronic equipment thereby creating a first data packet;

d. encrypting said first data packet in said electronic equipment with a first key thereby creating an encrypted first data packet;

e. passing said encrypted first data packet and a requested monetary value from said electronic equipment to said module;

f. subtracting said requested monetary value from a money register in said module; and

g. incrementing a transaction count in said module.

10. The method of claim 9, wherein after step g said method further comprises the steps of:

h. combining said transaction count, said requested monetary value, and said encrypted first data packet in said module and thereby creating a second data packet;

i. encrypting said second data packet with a second key in said module thereby creating an encrypted second data packet; and

j. passing said encrypted second packet to said electronic equipment.

11. The method of claim 10, further comprising the steps of:

k. decrypting said encrypted second data packet with a third key in said electronic equipment thereby creating a decrypted second data packet;

l. determining whether said requested monetary amount sent to said module is the same as in said decrypted second data packet; and

m. determining whether said encrypted first data packet sent to said module is the same as in said decrypted second data packet.

12. The method of claim 10, further comprising the steps of:

o. sending said encrypted second data packet from said electronic device to a provider;

p. decrypting said encrypted second data packet with a fourth key by said provider; and

q. decrypting said encrypted first data packet with a fifth key by said provider.

13. The method of claim 9, wherein said encryption step utilizes a predetermined encryption technique.

14. The method of claim 13, wherein said predetermined encryption technique is an RSA technique.

15. The method of claim 9, wherein said module is programmable.