System and method for authentication of data

• US 8,144,940 B2
• Filed: 08/07/2008
• Issued: 03/27/2012
• Est. Priority Date: 08/07/2008
• Status: Expired due to Fees

• Current Assignee: Semtek Innovative Solutions Incorporated (Verifone Systems, Inc.)
• Original Assignee: Semtek Innovative Solutions Incorporated (Verifone Systems, Inc.)
• Inventors: Von Mueller, Clay, Norton, Kirkpatrick W., Catinella, Paul Elbridge
• Primary Examiner(s): Allison, Andrae S
• Application Number:
  US12/188,114
• Publication Number:
  US 20100034434A1
• Time in Patent Office: 1,328 Days
• Field of Search: 382/115, 382/119, 382/138, 382/140, 235/449, 235/493, 235/487, 235/380, 235/375, 235/382, 340 58- 586
• US Class Current: 382/115
• CPC Class Codes: G07F 7/082 Features insuring the integrity of the data on or in the card
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04L 2209/04 Masking or blinding
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/002 Countermeasures against attacks on cryptographic mechanisms network architectures or network communication protocols for protection against malicious traffic H04L63/1441
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

Systems and methods for detecting forged magnetic stripe data through relative variations in flux transition location are provided. In one embodiment, the invention provides a method for detecting forged magnetic stripe data. The method provides for reading a magnetic strip multiple times to obtain multiple signatures and then generating a signature mask and weight based on the multiple signatures. These signatures are then compared with a known authentic signature. Based on the comparison results, a forged magnetic stripe may be detected. Additional embodiments focus on variations in the placement of the flux data transitions on the magnetic slurry rather than on the noise inherent in the slurry.

Claims

1. A method for detecting forged magnetic stripe data, comprising:

reading a magnetic stripe of a card to obtain signature data for a plurality of read operations;

generating a signature mask based on the signature data;

obtain data from a presented card;

generating a signature from the presented card; and

comprising the signature generated from the presented card to the signature mask to authenticate the presented card, wherein comparing the signature generated from the presented card to the signature mask uses an average of windows around a specific event and comprises;

generating an averaged deviation; and

normalizing the multiple window averaged deviations.

2. The method of claim 1, wherein a deviation is generated using mathematical computations.

3. The method of claim 1, wherein the signature data comprises a mathematical representation of a plurality of signatures obtained from the plurality of read operations.

4. The method of claim 1, wherein comparing the signature generated from the presented card to the signature mask uses interdigitated averaging.

5. The method of claim 1, further comprising;

comparing the window averaged deviation with a next multiple window

averaged deviation, and

setting a signature bit to a value based on the comparison.

6. The method of claim 1, wherein the windows around a specific event are one size.

7. The method of claim 1, wherein the windows around a specific event vary in size.

8. The method of claim 1, where the specific event is a location of rack data bits corresponding to one.

9. The method of claim 1, where the multiple average of varying sized windows contains multiple components.

10. The method of claim 1, further comprising:

comparing a normalized average value to a constant value; and

generating a signature bit.

11. The method of claim 9, wherein each bit corresponds to a data point of one in a magnetic stripe data.

12. The method of claim 9, each bit corresponds to one of a first sixty-four one data points in a data track.

13. The method of claim 1, wherein a weight used to generate the signature mask and the weight is changed based on a number of reference signatures used.

14. The method of claim 1, further comprising:

varying a weight used to generate the signature mask is based on a number of reference signatures.

15. The method of claim 14, wherein the signature mask is created by normalizing the at least one signature to an idealized signature.

16. A method for detecting forged magnetic stripe data, comprising:

reading a magnetic stripe of a card to obtain signature data for a plurality of read operations;

generating a signature mask based on the signature data;

obtain data from a presented card;

generating a signature from the resented card; and

comparing the signature generated from the presented card to the signature mask to authenticate the resented card, wherein comparing the signature generated from the presented card to the signature mask uses a multiple average deviation of varying sized windows around a specific event; and

generating an averaged deviation based on the generated signature mask.

17. A computer program product comprising a non-transitory computer readable medium having computer program logic embodied therein configured to cause a computer system to detect forged magnetic stripe data, comprising:

first computer readable program code for reading a magnetic stripe of a card to obtain signature data for a plurality read operations;

second computer readable program code for generating a signature mask based on the signature data;

third computer readable program code for obtaining data from a presented card;

fourth computer readable program code for generating a signature from a presented card and;

fifth computer readable program code for comparing the signature generated from the presented card to the signature mask to authenticate the presented card using an average of windows around a specific event, the fifth computer readable program code for comparing the signature comprising;

computer readable code for generating an averaged deviation; and

computer readable program code for normalizing the multiple window averaged deviations.

18. A processor configured to detect forged magnetic stripe data, comprising:

control logic for reading a magnetic stripe of a card to obtain signature data for a plurality of read operations;

control logic for generating a signature mask based on the signature data; and

control logic for comparing the signature generated from the presented card to the signature mask to authenticate the presented card using an average of windows around a specific event the control logic for comparing the signature comprising;

control logic for generating an averaged deviation; and

control logic for normalizing the multiple window averaged deviations.

19. An apparatus for detecting forged magnetic stripe data, comprising:

means for reading a magnetic stripe of a card to obtain signature data for a plurality of read operations;

means for generating a signature mask based on the signature data;

means for obtaining data from a presented card;

means for generating a signature from the presented card; and

means for comparing the signature generated from the presented card to the signature mask to authenticate the presented card using an average of windows around a specific event, the means for comparing the signature comprising;

means for generating an averaged deviation; and

means for normalizing the multiple window averaged deviations.