Secure credit card with near field communications

• US 7,128,274 B2
• Filed: 03/24/2005
• Issued: 10/31/2006
• Est. Priority Date: 03/24/2005
• Status: Active Grant

• Current Assignee: eBay Inc.
• Original Assignee: International Business Machines Corporation
• Inventors: Kelley, Edward E., Motika, Franco
• Primary Examiner(s): Le, Thien M.
• Assistant Examiner(s): Mai, Thien T.
• Application Number:
  US10/907,208
• Publication Number:
  US 20060213972A1
• Time in Patent Office: 586 Days
• Field of Search: 235/384, 235/492, 235/486, 235/380, 235/375, 235/376, 235/382, 235/382.5, 705/13, 705/41, 711/115, 370/439, 219/745, 343/742
• US Class Current: 235/492
• CPC Class Codes: G06K 19/0723 the record carrier comprising an arrangement for non-contact communication, e.g. wireless communication circuits on transponder cards, non-contact smart cards or RFIDs
• CPC Class Codes: G06K 19/073 Special arrangements for circuits, e.g. for protecting identification code in memory protection against unauthorised use of computer memory G06F12/14
• CPC Class Codes: G06K 7/0008 General problems related to the reading of electronic memory record carriers, independent of its reading method, e.g. power transfer
• CPC Class Codes: G06K 7/10237 the reader and the record carrier being capable of selectively switching between reader and record carrier appearance, e.g. in near field communication [NFC] devices where the NFC device may function as an RFID reader or as an RFID tag
• CPC Class Codes: G06K 7/10297 arrangements for handling protocols designed for non-contact record carriers such as RFIDs NFCs, e.g. ISO/IEC 14443 and 18092 cryptographic protocols H04L9/00; network security protocols H04L63/00; real-time communication protocols in data switching networks H04L65/00; network protocols for data switching network services H04L67/00
• CPC Class Codes: G06Q 20/2295 Parent-child type, e.g. where parent has control on child rights
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3415 Cards acting autonomously as pay-media
• CPC Class Codes: G06Q 20/352 Contactless payments by cards
• CPC Class Codes: G06Q 20/355 Personalisation of cards for use
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4093 Monitoring of device authentication
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

A near field communication device included in a secure transaction card provides an addition and/or transitional communication link for communicating secure transaction information. The near field communication device may be selectively engaged or disengaged and, when engaged, either active or passive modes of operation of the near field communication device can be selected. in the active mode, secure transaction information is transmitted upon establishment of a communication link with a complementary near field communication device. In the passive mode, secure transaction information is transmitted upon interrogation from a complementary near field communication device. Secure transaction information is generated and stored for transmission in a memory and at least a portion of the memory is erased or nulled upon transmission or upon expiration of a selected period of time.

Claims

1. A secure card comprising:

a card body which incorporates a microprocessor device, a read only memory device and a secure linear feedback shift register, the microprocessor device being interfaced to the read only memory device containing a pre-initialized personality configuration, said pre-initialized personality configuration being comprised of both a unique card identification and a customized secure linear feedback shift register initial configuration;

a reference linear feedback shift register incorporated in said card body and synchronized to the secure linear feedback shift register;

a security code generator incorporated in said card body and producing a security code utilizing said secure linear feedback shift register, said secure linear feedback shift register being driven by a common free-running clock oscillator and providing outputs which, when combined with the card identification, produce a security code uniquely based upon said pre-initialized personality configuration, said security code being accessible by the microprocessor; and

a communication interface incorporated in said card body and connected to said microprocessor device, said communication device providing an input/output message function of secured information including said security code between the microprocessor and an agent outside said secure card body, said communication interface further including a near field communication device for transmitting information by inductive electromagnetic coupling over a range of ten inches at a radio frequency and automatic peer-to-peer network setup without requiring establishment of device configuration and which can be set to an active or passive mode.

2. A secure transaction card as recited in claim 1,

wherein said near field communication device includes storage means for storing said secured information to be returned upon interrogation thereof, and further comprising

means for nulling a portion of said storage means upon expiration of a selected period of time or upon transmission thereof.

3. A secure transaction card as recited in claim 2, further including means for indicating return of said secured information in response to a said interrogation.

4. A secure transaction card as recited in claim 1, further including

means for indicating transmission of said secured information, and

means for nulling a portion of said storage means upon expiration of a selected period of time.

5. A secure transaction system including

a secure transaction card including

a card body which incorporates a microprocessor device, a read only memory device and a secure linear feedback shift register, the microprocessor device being interfaced to the read only memory device containing a pre-initialized personality configuration, said pre-initialized personality configuration being comprised of both a unique card identification and a customized secure linear feedback shift register initial configuration;

a reference linear feedback shift register incorporated in said card body and synchronized to the secure linear feedback shift register;

a security code generator incorporated in said card body and producing a security code utilizing said secure linear feedback shift register, said secure linear feedback shift register being driven by a common free-running clock oscillator and providing outputs which, when combined with the card identification, produce a security code uniquely based upon said pre-initialized personality configuration, said security code being accessible by the microprocessor; and

a communication interface incorporated in said card body and connected to said microprocessor device, said communication device providing an input/output message function of the secured information between the microprocessor and an agent outside said secure card body, said communication interface further including a near field communication device for transmitting information by inductive electromagnetic coupling over a range of ten inches at a radio frequency and automatic peer-to-peer network setup without requiring establishment of device configuration and which can be set to an active or passive mode, and

a complementary near field communication device for transmitting information by inductive electromagnetic coupling over a range of ten inches at a radio frequency and automatic peer-to-peer network setup without requiring establishment of device configuration and which can be set to an active or passive mode for forming a communication link for communication with at least one of a transaction processor and a secure card processor.

6. A secure transaction system as recited in claim 5 wherein said complementary near field communication device is associated with a card reader.

7. A secure transaction system as recited in claim 6 wherein said card reader is associated with a point-of-sale terminal.

8. A secure transaction system as recited in claim 5 wherein said complementary near field communication device is associated with a wireless communication device.

9. A secure transaction system as recited in claim 8 wherein said wireless communication device is one of a cell phone, a personal digital assistant, or a portable computer.