Portable electronic charge and authorization devices and methods therefor

• US 6,850,916 B1
• Filed: 03/02/1999
• Issued: 02/01/2005
• Est. Priority Date: 04/27/1998
• Status: Expired due to Term

• Current Assignee: ServStor Technologies, LLC (IP Investments Group LLC)
• Original Assignee: Esignx Corporation
• Inventors: Wang, Ynjiun Paul
• Primary Examiner(s): Nguyen, Cuong H.
• Application Number:
  US09/260,384
• Time in Patent Office: 2,163 Days
• Field of Search: G06/F 1.760, 705/1, 705/26, 705/64, 705/67, 705 75- 76, 380/30, 380/285, 235/379, 235/380
• US Class Current: 705/64
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/18 involving self-service terminals [SST], vending machines, kiosks or multimedia terminals
• CPC Class Codes: G06Q 20/32 using wireless devices
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/327 Short range or proximity payments by means of M-devices
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3415 Cards acting autonomously as pay-media
• CPC Class Codes: G06Q 20/363 with the personal data of a user
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G07F 19/20 Automatic teller machines [ATMs]
• CPC Class Codes: G07F 7/0866 by active credit-cards adapted therefor G07F7/1008 takes precedence
• CPC Class Codes: G07F 7/0886 the card reader being portable for interacting with a POS or ECR in realizing a payment transaction
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1025 : Identification of user by a PIN code
• CPC Class Codes: H04L 2463/102 : applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0442 : wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/0853 : using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/123 : received data contents, e.g. message integrity

Abstract

A portable transaction arrangement for permitting a user to conduct a charge card transaction vis-à-vis a charge card terminal of an electronic transaction system. The charge card terminal is configured to communicate with a charge card for the purpose of conducting the charge card transaction. The charge card is one of a magnetic stripe card and an electronic smart card. The portable transaction arrangement includes an emulation card having an emulation card interface. The emulation card interface emulates an interface of the charge card. The interface of the charge card facilitates communication between the charge card and the charge card terminal. There is also included a portable emulation card configuring device arranged to be used in conjunction with the emulation card, which in turn includes a memory configured to store first charge card data pertaining to a first charge card of the user, and an authentication mechanism. The portable emulation card configuring device is configured to write from the memory the first charge card data to the emulation card if the user is authenticated through the authentication mechanism, thereby allowing the emulation card to appear through the emulation card interface, after writing and for the purpose of conducting the transaction, like the first charge card to the charge card terminal and enabling the charge card terminal to read the first charge card data from the emulation card to conduct the charge card transaction.

Claims

1. A portable transaction arrangement for permitting a user to conduct a transaction vis-à

-vis an electronic transaction system, comprising;

a charge card terminal interfacing subsystem, including

an emulation card having an emulation card interface, said emulation card interface emulating an interface of a charge card, said charge card being one of a magnetic stripe card and an electronic smart card, said interface of said charge card facilitating communication between said charge card and a charge card terminal of said electronic transaction system; and

a portable emulation card configuring device arranged to be used in conjunction with said emulation card, including

a memory having two portions, a first portion configured to store charge card data pertaining to a charge card of said user and second portion configured to store a user private key, and

an authentication mechanism, said portable emulation card configuring device being configured to write from said memory said charge card data pertaining to said charge card of said user to said emulation card if said user is authenticated through said authentication mechanism, thereby allowing said emulation card to appear through said emulation card interface, after writing and for the purpose of conducting said transaction, like said charge card of said user to said charge card terminal and enabling said charge card terminal to read said charge card data from said emulation card to conduct said transaction; and

an electronic authorization interfacing subsystem, including first logic circuit configured to receive first digital data representative of a transaction request pertaining to said transaction from said electronic transaction system,

second logic circuit configured to form second digital data responsive to said transaction request received by said first logic circuit if said transaction request is approved by said user, said second digital data representing encrypted data signifying an approval by said user of said transaction request; and

second digital data including encrypted transaction information being encrypted by said private key and includes at least one of a transaction time and a transaction amount pertaining to said charge card transaction, said encrypted transaction information being readable by said charge card terminal and renders said emulation card valid only for said charge card transaction; and

transmission circuitry coupled to said second logic circuit, said transmission circuitry being configured to transmit said second digital data from said portable transaction arrangement to said electronic transaction system if said user approves said transaction request.

2. The portable transaction arrangement of claim 1 wherein said portable emulation card configuring device further comprises encryption logic disposed between said emulation card interface and said first memory portion, said encryption logic providing secured access between said emulation card interface and said first memory portion.

3. The portable transaction arrangement of claim 1 wherein said emulation card includes a unique identification mark for the purpose of substantially uniquely associating said emulation card with said portable emulation card configuring device.

4. The portable transaction arrangement of claim 1 wherein said portable emulation card configuring device further comprising encryption logic couple to said first memory portion, said encryption logic being disposed to provide secured access to said first memory portion.

5. The portable transaction arrangement of claim 4 wherein said encryption logic is also disposed to provide secured access to said second memory portion.

6. The portable transaction arrangement of claim 5 wherein said emulation card configuring device includes a charge card selection mechanism, said charge card selection mechanism enabling said user to chose said charge card of said user among a plurality of charge cards whose charge card data is also stored in said first memory portion.

7. The portable transaction arrangement of claim 5 wherein said authentication mechanism includes an input mechanism for accepting a password comprising an alphanumeric string from said user for the purpose of authentication.

8. The portable transaction arrangement of claim 5 wherein said authentication mechanism employs biometrics for authentication.

9. The portable transaction arrangement of claim 5 wherein said portable emulation card configuring device is further configured to write an encrypted transaction number to said emulation card, said encrypted transaction number being encrypted by said private key.

10. The portable transaction arrangement of claim 1 wherein said encrypted transaction information includes said transaction time, said emulation card is invalid for the purpose of completing a given charge card transaction if said given charge card transaction is not completed within a predefined time period of said transaction time.

11. The portable transaction arrangement of claim 1 wherein said charge card is a magnetic stripe automated teller machine (ATM) card, said charge card term being an automated teller machine (ATM) terminal.

12. The portable transaction arrangement of claim 1 wherein said charge card is a magnetic stripe card, said charge card terminal being a point of sale terminal.

13. The portable transaction arrangement of claim 1 wherein said charge card is an electronic smart card.

14. The portable transaction arrangement of claim 1 wherein said portable emulation card configuring device is configured to erase said first charge card data from said emulation card upon completion of said charge card transaction.