Radio frequency transponder stored value system employing a secure encryption protocol

• US 5,832,090 A
• Filed: 08/10/1995
• Issued: 11/03/1998
• Est. Priority Date: 08/10/1995
• Status: Expired due to Term

• Current Assignee: Assa Abloy AB
• Original Assignee: HID Corporation (Assa Abloy AB)
• Inventors: Raspotnik, William B.
• Primary Examiner(s): Cain, David C.
• Application Number:
  US08/513,646
• Time in Patent Office: 1,181 Days
• Field of Search: 380/24, 380/23, 235/380, 235/492, 364/408
• US Class Current: 705/66
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3672 initialising or reloading thereof
• CPC Class Codes: G06Q 20/4093 Monitoring of device authentication
• CPC Class Codes: G07F 7/082 Features insuring the integrity of the data on or in the card
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

An encryption method and stored value system comprising a host computer, a reader/writer that communicates with the host computer, and an RF transponder that communicates with the reader/writer. The transponder comprises a transponder chip having a memory with a plurality of memory sections, which encryption method protects data stored in the memory. The method provides a secure way to increase and decrease the value stored the transponder and to selectively write and data to and from the transponder.

Claims

1. A stored value system comprising:

an RF transponder retainable by an individual public user comprising a transponder chip including a transponder memory that stores transponder data therein including a stored value, and an RF transponder antenna for transmitting the transponder data and receiving commands;

a reader/writer physically accessible to a plurality of the individual public users for communicating with the transponder by way of the RF transponder antenna, including receiving the transponder data from the transponder and transmitting commands to the transponder;

a secure central host computer remotely positioned relative to the reader/writer and physically inaccessible to the plurality of individual public users for communicating with a plurality of the reader/writers, for transforming the transponder data and for generating a secret key, a public key, and an encrypted validation signature from the secret key and the transformed transponder data, wherein the central host computer includes a host computer memory for storing the secret key and the public key; and

a communications link between the central host computer and the reader/writer for communicating the encrypted validation signature and public key from the central host computer to the reader/writer and for communicating the transponder data from the reader/writer to the central host computer, wherein the reader/writer includes means for transforming the transponder data, for decrypting the encrypted validation signature using the public key, comparing the decrypted validation signature to the transformed transponder data and transmitting a value change command for the stored value in response to a match between the decrypted validation signature and the transformed transponder data.

2. The stored value system of claim 1 wherein the memory in the transponder is divided into a plurality of memory sections, that respectively comprise a serial number section that stores a unique serial number for the transponder, an information section that stores non-value information, a current value section that stores a current value of the transponder, wherein the current value is the stored value, a maximum value section that stores a maximum possible monetary value of the transponder that is set each time the current value of the transponder is increased, a random number section that stores a random number that is generated by the transponder chip, and a signature section that stores the encrypted validation signature.

9. The stored value system of claim 1, wherein the transponder includes a random number generator for generating a random number and the random number is included in the transponder data received by the reader/writer, communicated to the host computer via the communications link and used in a transformed format to generate the encrypted validation signature.

10. The stored value system of claim 9, wherein the plurality of memory sections includes a random number section that stores the random number and the random number section is only writeable to by the transponder.

3. An method for increasing a stored value in a stored value system, the stored value system comprising a secure central host computer, a plurality of reader/writers that communicate with the host computer, and an RF transponder that communicates with the reader/writers and which comprises a transponder chip having a transponder memory, said method comprising:

transmitting an increase value command plus a new desired increased value for the transponder from one of the reader/writers to the transponder in response to input from an individual public user retaining the transponder and physically accessing the reader/writer;

storing the new desired increased value in a temporary memory buffer of the transponder;

generating a random number in the transponder, storing the random number in a random number section of the transponder memory, and transmitting the random number to the reader/writer;

transmitting the random number generated by the transponder, and the new desired increased value from the reader/writer to the host computer remotely positioned relative to the reader/writer and physically inaccessible to the individual public user;

computing a hash function in the host computer based upon the random number generated by the transponder, and the new desired increased value;

generating an encrypted signature for the result of the hash function using a secret key;

transmitting the encrypted signature from the host computer to the reader/writer;

transmitting the encrypted signature from the reader/writer to the transponder; and

storing the encrypted signature in a signature section of the transponder memory and the new desired increased value in a maximum value section of the transponder memory and a current value section of the transponder memory.

4. The method of claim 3 further comprising:

transmitting a decrease value command and a desired decreased value from the reader/writer to the transponder;

comparing at the transponder the desired decreased value to a current value stored in the transponder memory;

writing the desired decreased value into the current value section of the transponder memory if the desired decreased value is less than the current value; and

generating an error message if the desired decreased value is greater than or equal to the current value.

5. The method of claim 3 further comprising:

transmitting a read command from the reader/writer to the transponder; and

selectively transmitting data stored in a predetermined section of the transponder memory from the transponder to the reader/writer in response to the read command.

6. The method of claim 3 further comprising:

transmitting a write command plus appropriate data from the reader/writer to the transponder; and

storing the appropriate data in a predetermined section of the transponder memory.

7. The method of claim 4 further comprising:

transmitting a read command from the reader/writer to the transponder; and

selectively transmitting data stored in a predetermined section of the transponder memory from the transponder to the reader/writer in response to the read command.

8. The method of claim 4 further comprising:

transmitting a write command plus appropriate data from the reader/writer to the transponder; and

storing the appropriate data in a predetermined section of the transponder memory.

11. The method of claim 3, wherein the random number section of the transponder memory is only writeable to by the transponder.