System, method, and apparatus for smart card pin management via an unconnected reader

• US 8,186,586 B2
• Filed: 06/05/2009
• Issued: 05/29/2012
• Est. Priority Date: 06/05/2009
• Status: Active Grant

• Current Assignee: Entrust Corp.
• Original Assignee: Datacard Corp. (Entrust Corp.)
• Inventors: Maddocks, Ian
• Primary Examiner(s): VO, TUYEN KIM
• Application Number:
  US12/479,464
• Publication Number:
  US 20100308109A1
• Time in Patent Office: 1,089 Days
• Field of Search: 235/375, 235/379, 235/380, 235/382, 235/382.5, 235/451, 235/492, 235/383, 235/449, 235/487, 235/493
• US Class Current: 235/382.5
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/352 Contactless payments by cards
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1025 Identification of user by a PIN code

Abstract

A system of changing the PIN associated with a smart card is described. A user can initiate the PIN change using a personal unwired smart card reader, rather than using a system, such as an ATM machine. The smart card reader, loaded with the smart card provides a cryptogram code, which can contain the user'"'"'s requested new PIN or it can be provided to the issuer via alternative methods. Via various methods the cryptogram code is delivered to the card issuer'"'"'s PIN change management system, including the user transposing the code from smart card reader screen to the card issuer'"'"'s web site or audio DTMF transmission from the smart card reader speaker to the card issuer IVR system. Returned from the issuer, via a similar path, will be a command code that when processed by the smart card reader will result in a PIN change on the smart card.

Claims

1. A system that manages a user'"'"'s personal identification number (PIN) for a smart card associated with the user, comprising:

a smart card reader having;

a smart card interface that can interface the smart card reader with the smart card;

a message creator connected to the smart card interface and that is operable to form a PIN change request message from data received from the smart card for communication from the smart card reader and to form a smart card command from a PIN change command received by the smart card reader for communication to the smart card;

a PIN engine in communication with the smart card interface and the message creator, the PIN engine is operable to verify the PIN of the smart card and instruct the smart card to change to a new PIN; and

a user interface in communication with the message creator;

a PIN management system having a portal interface, an authentication module in communication with the portal interface, and a message processor connected to the authentication module; and

a public network interconnecting the smart card reader and the PIN management system.

2. The system of claim 1, wherein the public network comprises a web site on the internet, a telephone system available by a published number, or an e-mail address provided to the user.

3. The system of claim 1, wherein the data received by the message creator from the smart card comprises a cryptogram, and the PIN change request message formed by the message creator for communication from the smart card reader includes the new PIN requested by the user.

4. The system of claim 3, wherein the PIN change request message includes an indication that the smart card'"'"'s current PIN has been verified.

5. The system of claim 3, wherein the cryptogram includes the new PIN requested by the user.

6. The system of claim 1, wherein the PIN change command received by the smart card reader includes the new PIN.

7. A method of managing a user'"'"'s personal identification number (PIN) for a smart card associated with the user, comprising:

receiving a request for a PIN change of the user'"'"'s smart card by a smart card reader, the request including a new PIN for the user'"'"'s smart card;

the smart card reader transmitting the request for a PIN change and the new PIN to the user'"'"'s smart card which generates a cryptogram that includes the new PIN;

transmitting the cryptogram from the smart card to the smart card reader and using the smart card reader to generate a PIN change request message from the cryptogram;

transmitting the PIN change request message from the smart card reader to a PIN management system which generates a PIN change command for transmission to the smart card reader, wherein the PIN change request message and the PIN change command are transmitted via a public network interconnecting the smart card reader and the PIN management system;

receiving the PIN change command from the PIN management system into the smart card reader which interprets the PIN change command and generates a smart card command; and

transmitting the smart card command to the smart card to change to the new PIN.

8. The method of claim 7, wherein the public network comprises a web site on the internet, a telephone system available by a published number, or an e-mail address provided to the user.

9. The method of claim 7, wherein receiving the PIN change command from the PIN management system into the smart card reader comprises manually entering the PIN change command into the smart card reader.

10. A system that manages a user'"'"'s personal identification number (PIN) for a smart card associated with the user, comprising:

a smart card reader having;

a smart card interface that can interface the smart card reader with the smart card;

a message creator connected to the smart card interface and that is operable to form a message from data received from the smart card for communication from the smart card reader and to form a command from a message received by the smart card reader for communication to the smart card;

a PIN engine in communication with the smart card interface and the message creator, the PIN engine is operable to verify the PIN of the smart card and instruct the smart card to change to a new PIN; and

a user interface in communication with the message creator.

11. The system of claim 10, wherein the data received by the message creator from the smart card comprises a cryptogram, and the message formed by the message creator for communication from the smart card reader comprises a PIN change request that includes the new PIN requested by the user.

12. The system of claim 11, wherein the cryptogram includes the new PIN requested by the user.

13. The system of claim 10, wherein the message received by the smart card reader comprises a PIN change command received from a PIN management system.

14. The system of claim 13, wherein the PIN change command includes the new PIN.