Method of authenticating a personal code of a user of an integrated circuit card

• US 6,435,416 B1
• Filed: 11/20/2000
• Issued: 08/20/2002
• Est. Priority Date: 05/20/1998
• Status: Expired due to Term

• Current Assignee: Axalto S A
• Original Assignee: Schlumberger Systemes
• Inventors: Slassi, Tarik
• Primary Examiner(s): Frech, Karl D.
• Assistant Examiner(s): TAYLOR, APRIL ALICIA
• Application Number:
  US09/717,324
• Time in Patent Office: 638 Days
• Field of Search: 235/492, 235/380, 235/379, 235/381, 235/375, 235/382, 705/72, 705/39, 705/43, 705/44
• US Class Current: 235/492
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00

Abstract

A method of authenticating a personal code of a user of an integrated circuit card received in a reader fitted with a keypad, connected to a computer, and capable of accepting at least one type of card. Formatting instructions are transmitted from the computer to the reader that correspond to the type of the card. A command is sent for authenticating the personal code and the authentication command is verified in the reader. For a qualified authentication command, the reader is put into a secure mode which blocks anyone with fraudulent intentions from intervening in the procedure to obtain the personal code. The personal code is then inputted via the keypad of the reader, formatted for the particular type of card used, and the formatted code and the command for authenticating it are transmitted from the reader to the integrated circuit of the card. The card compares the formatted code with a pre-stored personal code.

Claims

1. A method of authenticating a personal code of a user of an integrated circuit card received in a reader fitted with a keypad, communicating with a computer, and capable of accepting at least one type of card, comprising:

recognizing what type of card is inserted in the reader;

transmitting formatting instructions from the computer to the reader, said instructions corresponding to the recognized type of the card;

transmitting from the computer to the reader an authentication command for use by the integrated circuit card to authenticate the personal code;

verifying that the authentication command received by the reader qualifies as a command for authenticating the personal code inputted via the keypad of the reader;

for a compliant authentication command, putting the reader into a secure mode;

receiving the personal code inputted via the keypad of the reader, and formatting the inputted personal code in accordance with said formatting instructions; and

transmitting the formatted code and the authentication command from the reader to the integrated circuit card.

2. The method according to claim 1, wherein prior to inputting the personal code, informing the user that the reader is in said secure mode.

3. The method according to claim 1, wherein, subsequent to putting the reader in said secure mode, authorizing inputting of the personal code.

4. The method according to claim 1, wherein said secure mode prevents the execution of instructions that enable the computer to access the inputted personal code.

5. The method according to claim 1, wherein, simultaneously with the step of inputting and formatting the personal code, ensuring that any instruction coming from the computer during the step of inputting and formatting the personal code is compatible with keeping the reader in said secure mode.

6. The method according to claim 1, wherein, subsequent to transmitting the formatted personal code to the integrated circuit, performing in the integrated circuit of the card a comparison of the transmitted formatted personal code with the personal code of the user as pre-stored in the integrated circuit.

7. The method according to claim 6, further comprising the step of transmitting a result of the comparison from the integrated circuit to the computer via the reader.

8. The method according to claim 1, wherein the verifying step is performed in the reader.

9. A method of authenticating a personal code of a user of an integrated circuit card adapted to be received in a reader, comprising:

providing to the reader an authentication command for use by the integrated circuit card to authenticate the personal code;

verifying that the authentication command received by the reader qualifies as a command for authenticating the personal code;

responsive to verification of the authentication command, enabling input to the reader of the personal code by the user;

receiving the personal code inputted by the user to the reader; and

providing the authentication command and a signal related to the inputted personal code from the reader to the integrated circuit card.