Method and apparatus for acquiring access using a fast smart card transaction

• US 6,018,717 A
• Filed: 08/21/1998
• Issued: 01/25/2000
• Est. Priority Date: 08/22/1997
• Status: Expired due to Term

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Wentzein, Irwin H., Lee, Alson, Sloan, Jerry F.
• Primary Examiner(s): MacDonald, Allen R.
• Assistant Examiner(s): MEINECKE DIAZ, SUSANNA M
• Application Number:
  US09/138,036
• Time in Patent Office: 522 Days
• Field of Search: 705/13, 705/39, 705/41, 705/44, 705/65, 713/182, 713/184
• US Class Current: 705/13
• CPC Class Codes: G06Q 20/105 involving programming of a portable memory device, e.g. IC cards, "electronic purses"
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G07F 7/08 by coded identity card or credit card or other personal identification means without personal verification means G07F7/02
• CPC Class Codes: G07F 7/0866 by active credit-cards adapted therefor G07F7/1008 takes precedence
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

A method for using a smart card to gain access through an access device upon payment of a value (V) is performed by first operatively coupling the card to the access device. The access device reads a first and a second set of data from the card, and performs a first authentication process on the first set of data. Access is permitted if the first authentication process meets a required condition. Access is denied otherwise. If access is permitted, the second set of data is stored in the access device for further processing, including a second authentication process which operates on the first and second sets of data.

Claims

1. A method for using a smart card to gain access through an access device upon payment of a value (V), the method comprising the steps of:

operatively coupling said smart card to said access device;

reading at least a first set of data and a second set of data from said smart card;

performing a first authentication process on said at least first set of data;

permitting access if said step of performing a first authentication process meets a required condition;

storing said at least first set of data and said second set of data in a memory of said access device when access is permitted, wherein when access is not permitted, said at least first set of data and said second set of data are not stored in said memory of said access device; and

performing a second authentication process on said at least first set of data and said second set of data after said step of permitting access is accomplished.

2. The method of claim 1, wherein said first set of data includes information indicating a balance (B) of funds available in said smart card, and an expiration date (DEXP) of said smart card.

3. The method of claim 1, wherein said second set of data includes a card public key certificate, a card issuer public key certificate, and a signature generated by said smart card.

4. The method of claim 2, wherein said first authentication process includes the step of verifying that said balance (B) is greater than said value (V).

5. The method of claim 2, wherein said first authentication process includes the step of verifying that said expiration date (DEXP) has not passed.

6. The method of claim 2, wherein said required condition is said balance (B) being greater than said value (V).

7. The method of claim 3, wherein said second authentication process includes the steps of verifying said card certificate, verifying said issuer certificate, and verifying said card signature.

8. The method of claim 1, wherein said second authentication process is performed between a terminal device and said access device.

9. The method of claim 8, wherein said terminal device includes a security card.

10. A method for processing a transaction using a smart card, the transaction being associated with providing access to a commodity, the method comprising:

operatively coupling the smart card to a transaction device, the transaction device including a memory;

reading at least a first set of transaction information and a second set of transaction information from the smart card;

selecting an application, the application being associated with at least the smart card, the application being selected at least in part using the at least first set of transaction information;

performing a low-level authentication using the at least first set of transaction information, the low-level authentication being based at least in part on the application;

determining whether the low-level authentication is successful, wherein when it is determined that the low-level authentication is successful, the at least first set of transaction information is stored in the memory, and wherein when it is determined that the low-level authentication is not successful, the at least first set of transaction information is not stored in the memory; and

performing a high-level authentication using the second set of transaction information when it is determined that the low-level authentication is successful.

11. A method as recited in claim 10 wherein when it is determined that the low-level authentication is successful, access to the commodity is authorized.

13. A method as recited in claim 10 further including encrypting the at least first set of transaction information.

14. A method as recited in claim 13 wherein the at least first set of transaction information is encrypted after the at least first set of transaction information is stored in the memory.

15. A method as recited in claim 10 wherein performing the high-level authentication includes using the at least first set of transaction information in addition to the second set of transaction information.

12. A method as recited in claim 18 further including decoupling the smart card and the transaction device, wherein the high-level authentication is performed after the smart card and the transaction device are decoupled.