Transfer of verification data

• US 7,789,302 B2
• Filed: 08/17/2001
• Issued: 09/07/2010
• Est. Priority Date: 08/17/2000
• Status: Expired due to Fees

• Current Assignee: Dexrad Limited
• Original Assignee: Dexrad Limited
• Inventors: Tame, Gavin Randall
• Primary Examiner(s): Lee; Seung H
• Application Number:
  US10/344,793
• Publication Number:
  US 20040026502A1
• Time in Patent Office: 3,308 Days
• Field of Search: 235/382, 235/492, 235/487
• US Class Current: 235/382
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3552 Downloading or loading of personalisation data
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 20/4097 using mutual authentication between devices and transaction partners
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00

Abstract

A method and system are provided for transferring verification data from a first carrier to at least a second carrier in a secure manner. A first carrier, which is typically a smart card based ID card, contains verification data to identify the card holder securely. The method of the invention verifies the verification data on the ID smart card, reads the verification data, compresses and encrypts it, and writes it onto a second carrier, which may be a second smart card or a printed document, for example, in a machine readable form. The invention permits verification data to be securely transferred from one carrier to another, which permits a high degree of security in numerous applications such as the issuing of bank cards, medical aid claims, and other valuable documents.

Claims

1. A method of transferring verification data from a first carrier to a second carrier, the method comprising the steps of:

placing the first carrier in a reader connected to a computing device; and

operating the computing device to perform steps of;

verifying the verification data on the first carrier;

reading the verification data;

securing the verification data; and

writing the verification data to the second carrier in a machine readable format;

wherein the step of verifying the verification data includes the steps of controlling access to the first carrier by verifying the credentials of an operator designated to implement at least the reading step and verifying the identity of the holder of the first carrier, where said operator and said holder are separate from one another, and where the operator and holder verification steps each comprise at least one of a PIN code, a password, or a biometrically-based verification procedure.

2. A method according to claim 1 including the further steps of controlling access to the verification data written to the second carrier, reading the verification data and verifying the read data.

3. A method according to claim 2 wherein the step of controlling access to the written verification data on the second carrier is substantially identical to the corresponding access control step in respect of the first carrier.

4. A method according to claim 2 wherein the step of verifying the read data on the second carrier is substantially identical to the corresponding verification step with respect to the first carrier.

5. A method according to claim 2 including the still further steps of reading the verification data from the second carrier and writing the verification data to a third carrier in machine readable format.

6. A method according to claim 5 wherein the second carrier is a document to which the verification data is applied in machine readable format, and the third carrier is a portable date storage device.

7. A method according to claim 6 wherein the third carrier is a smart card.

8. A method according to claim 5 wherein the second carrier is a portable data storage device and the third carrier is a document to which the verification data is applied in machine readable format.

9. A method according to claim 1 wherein the first carrier is a portable data storage device.

10. A method according to claim 9 wherein the first carrier is a first smart card.

11. A method according to claim 1 wherein the second carrier is a portable data storage device.

12. A method according to claim 11 wherein the second carrier is a second smart card.

13. A method according to claim 11 wherein the second carrier comprises a document to which the verification data is applied in a machine readable format.

14. A method according to claim 1 wherein the first carrier is an identity-based carrier associated with an individual.

15. A method according to claim 1 wherein the PIN code or password and the biometrically-based verification procedures are used in conjunction with one another in a matching procedure.

16. A method according to claim 1 wherein the securing step includes the steps of adding additional security data to the verification data and compressing and encrypting the combined security and verification data.

17. A method according to claim 1 which provides for the secure transfer of verification data from a first carrier to an n^th carrier via n−

2 carriers, wherein each intermediate data transfer step is secured.

18. A system for transferring verification data from a first carrier to at least a second carrier in a secure manner, the system including means for verifying the verification data on the first carrier, means for reading the verification data, means for securing the verification data, and means for writing the verification date to a second carrier in a machine readable format, said means for verifying the verification data including means for controlling access to the first carrier by verifying the credentials of an operator designated to implement at least the reading of the verification data and the identity of the holder of the first carrier, where the operator and holder are separate from one another, and where verifying the credentials of an operator and the identity of the holder of the first carrier each comprise at least one of a PIN code, a password, or a biometrically-based verification procedure.

19. A system according to claim 18 further including means for controlling access to the verification data on the second carrier, means for reading the verification data on the second carrier, and means for verifying read verification data on the second carrier.

20. A system according to claim 19 wherein the securing means includes encrypting and decrypting means as well as compressing and decompressing means for compressing, encrypting, decrypting and decompressing the verification data.

21. A system according to claim 18 wherein the first carrier is an identity-based carrier associated with an individual.