Token authentication using spatial characteristics

• US 8,251,283 B1
• Filed: 05/08/2009
• Issued: 08/28/2012
• Est. Priority Date: 05/08/2009
• Status: Expired due to Fees

• Current Assignee: Semtek Innovative Solutions Incorporated (Verifone Systems, Inc.)
• Original Assignee: Oberon Labs LLC
• Inventors: Norton, Kirkpatrick W.
• Primary Examiner(s): Lee, Michael G
• Assistant Examiner(s): Gudorf, Laura
• Application Number:
  US12/437,801
• Time in Patent Office: 1,208 Days
• Field of Search: 235/380, 235/493, 235/449, 235/375, 705 75- 76, 726/20, 382190-191, 713/176
• US Class Current: 235/380
• CPC Class Codes: G06K 19/06187 with magnetically detectable marking
• CPC Class Codes: G06K 7/084 sensing magnetic material by relative movement detecting flux changes without altering its magnetised state

Abstract

Systems and methods for token authentication analyze token data over one or more read operations to compute a characteristic master signature for the token. This can be accomplished, for example by analyzing the token data statistically to compute a characteristic signature for the token. Similar techniques can be used to generate a subsequent signature that can be verified against the original characteristic signature to authenticate the token. For example, a signature can be generated on a per use basis and that signature verified against the characteristic signature to validate the token upon use.

Claims

1. A method for characterizing a magnetic stripe card based on spatial characteristics of data encoded on a magnetic stripe of the card, the method comprising the steps of:

using a magnetic stripe reader to read a waveform of data encoded on the magnetic stripe of the card;

parameterizing the waveform of the data encoded on the card to determine spatial features of the waveform;

characterizing a subset of the spatial features of the waveform to determine spatial characteristics of the waveform, comprising computing a function of the spatial parameters for a plurality of bits in a segment of the data, wherein computing the function comprises comparing a bit width to other bit widths, comparing a bit width to an average of bit widths, computing a ratio of bit widths, comparing bit averages to other bit averages, comparing median bit widths to average bit widths, or comparing ratios of bit widths to peak widths; and

determining a characterization signature of the magnetic stripe card using the spatial characteristics, wherein the characterization signature characterizes the magnetic stripe card.

2. The method of claim 1, wherein the spatial features comprise a bit width, a peak shape, a peak width, a rise time, or a fall time.

3. A method for characterizing a magnetic stripe card based on spatial characteristics of data encoded on a magnetic stripe of the card, the method comprising the steps of:

using a magnetic stripe reader to read a waveform of data encoded on the magnetic stripe of the card;

parameterizing the waveform of the data encoded on the card to determine spatial features of the waveform;

characterizing a subset of the spatial features of the waveform to determine spatial characteristics of the waveform, comprising;

calculating an average bit width for a segment of the data;

determining a deviation between individual bits in the segment and the average bit width calculated for the segment; and

averaging the deviations determined for the individual ones of the bits in the segment to determine an average deviation for the segment; and

determining a characterization signature of the magnetic stripe card using the spatial characteristics, wherein the characterization si nature characterizes the magnetic stripe card.

4. The method of claim 3, wherein the segment comprises all or a part of the data encoded on the magnetic stripe card.

5. The method of claim 3, wherein the steps of calculating, determining and averaging are performed for a plurality of segments of data encoded on the magnetic stripe, and wherein the fingerprint comprises the average deviations for some or all of the plurality of the segments.

6. The method of claim 5, wherein a segment comprises a single bit or a consecutive plurality of bits.

7. The method of claim 5, wherein a segment comprises a plurality of non-consecutive individual bits of the encoded data.

8. The method of claim 5, wherein the steps of calculating, determining and averaging performed for the plurality of segments are performed for a plurality of read operations and wherein the method further comprises the step of determining the consistency of results obtained for each segment across the multiple read operations.

9. The method of claim 5, wherein the fingerprint is further determined based on the consistency of the results across the multiple read operations.

10. The method of claim 3, wherein the difference between individual ones of the bits and the average bit width is determined as a percentage of the average bit width.

11. The method of claim 3, wherein the steps of reading, parameterizing, and characterizing are performed a plurality of times for the magnetic stripe card to determine the characteristic signature based on a plurality of read operations.

12. The method of claim 3, wherein the step of characterizing a subset of the spatial features of the waveform to determine spatial characteristics further comprises performing a spectral analysis of the spatial features of the waveform.

13. A method for characterizing a magnetic stripe card based on spatial characteristics of data encoded on a magnetic stripe of the card, the method comprising the steps of

using a magnetic stripe reader to read a waveform of data encoded on the magnetic stripe of the card;

parameterizing the waveform of the data encoded on the card to determine spatial features of the waveform;

characterizing a subset of the spatial features of the waveform to determine spatial characteristics of the waveform, comprising performing a spectral analysis of the spatial features of the waveform;

determining a characterization signature of the magnetic stripe card using the spatial characteristics, wherein the characterization signature characterizes the magnetic stripe card; and

discarding unreliable spectral components.

14. A method for characterizing a magnetic stripe card based on spatial characteristics of data encoded on a magnetic stripe of the card, the method comprising the steps of:

using a magnetic stripe reader to read a waveform of data encoded on the magnetic stripe of the card;

parameterizing the waveform of the data encoded on the card to determine spatial features of the waveform for multiple read operations;

characterizing a subset of the spatial features of the waveform to determine spatial characteristics of the waveform, comprising;

identifying consistent variations across all bits of the waveform; and

disregarding inconsistent variations for purposes of authenticating the magnetic stripe card; and

determining a characterization signature of the magnetic stripe card using the spatial characteristics, wherein the characterization signature characterizes the magnetic stripe card.

15. The method of claim 14, wherein the steps of parameterizing and characterizing are performed for a plurality of read operations to determine a master characterization based on a plurality of data sets.

16. The method of claim 14, wherein the characterization signature defines a master characterization signature for the magnetic stripe card.

17. The method of claim 16, further comprising, for a magnetic stripe card presented for a transaction, performing the steps of:

using a magnetic stripe reader to read a waveform of data encoded on the magnetic stripe of the card presented for the transaction;

parameterizing the waveform of the data encoded on the card presented for the transaction to determine spatial features of the waveform of the card presented for the transaction;

characterizing a subset of the spatial features of the waveform of the card presented for the transaction to determine spatial characteristics of the waveform;

determining a transaction characterization signature for the magnetic-stripe card presented for the transaction; and

comparing the transaction characterization signature characterization to the master characterization to determine whether the magnetic-stripe-card is authentic.

18. A computer program product comprising a computer useable storage medium having computer program code embodied therein for enabling a processing device to characterize a magnetic stripe card based on spatial characteristics of data encoded on the magnetic stripe of the card, the computer-readable program code comprising:

a computer program code portion for reading data encoded on the magnetic stripe of the card;

a computer program code portion for calculating spatial characterstics of the data encoded on the card, comprising;

a computer program code portion for calculating spatial characteristics of a bit waveform of the encoded data in a segment of the data; and

a computer program code portion for computing a function of bit spatial characteristics for bits in the segment, wherein the computer program code for computing the function comprises a computer program code portion for comparing a bit width to other bit widths, a computer program code portion for comparing a bit width to an average of bit widths, a computer program code portion for computing a ratio of bit widths, a computer program code portion for comparing bit averages to other bit averages, a computer program code portion for comparing median bit widths to average bit widths, or a computer program code portion for comparing ratios of bit widths to peak widths; and

a computer program code portion for determining a characterization signature of the magnetic stripe card using the spatial characteristics, wherein the signature characterizes the magnetic stripe card.

19. The computer program product of claim 18, wherein the spatial characteristic comprises bit width, a peak shape, a rise time, or a fall time.

20. A computer program product comprising a computer useable storage medium having computer program code embodied therein for enabling a processing device to characterize a magnetic stripe card based on spatial characteristics of data encoded on the magnetic stripe of the card, the computer-readable program code comprising:

a computer program code portion for reading data encoded on the magnetic stripe of the card;

a computer program code portion for calculating spatial characteristics of the data encoded on the card, comprising;

a computer program code portion for calculating spatial characteristics of a bit waveform of the encoded data in a segment of the data;

a computer program code portion for computing a function of bit spatial characteristics for bits in the segment;

a computer program code portion for calculating an average bit width for a segment of the data;

a computer program code portion for determining a deviation between individual bits in the segment and the average bit width calculated for the segment; and

a computer program code portion for averaging the deviations determined for the individual ones of the bits in the segment to determine an average deviation for the segment; and

a computer program code portion for determining a characterization signature of the magnetic stripe card using the spatial characteristics, wherein the signature characterizes the magnetic stripe card.

21. The computer program product of claim 20, wherein the segment comprises all or a part of the data encoded on the magnetic stripe card.

22. The computer program product of claim 20, wherein the computer program code portion for calculating, determining and averaging is configured to perform these operations for a plurality of segments of data encoded on the magnetic stripe, and wherein the fingerprint comprises the average deviations for some or all of the plurality of the segments.

23. The computer program product of claim 22, wherein the segments comprise portions of the data comprising a consecutive plurality of bits.

24. The computer program product of claim 22, wherein the segments comprise a plurality of non-consecutive individual bits of the encoded data.

25. The computer program product of claim 22, wherein the computer program code portion for calculating, determining and averaging is configured to perform these operations for a plurality of read operations and further comprising a computer program code portion for determining the consistency of results obtained for each segment across the multiple read operations.

26. The computer program product of claim 22, wherein the computer program code is further configured to determine the fingerprint based on the consistency of the results across the multiple read operations.

27. The computer program product of claim 20, wherein the compute program code is further configured to determine difference between individual ones of the bits and the average bit width as a percentage of the average bit width.

28. A computer program product comprising a computer useable storage medium having computer program code embodied therein for enabling a processing device to characterize a magnetic stripe card based on spatial characteristics of data encoded on the magnetic stripe of the card, the computer-readable program code comprising:

a computer program code portion for calculating spatial characteristics of the data encoded on the card, comprising;

a computer program code portion for calculating a characteristics of the data bit encoded on the card, comprising;

a computer program code portion for calculating spatial characteristics of the bit waveform of the encoded data for a segment of the data; and

a computer program code portion for performing a spectral analysis of the bit widths calculated in the segment; and

a computer program code portion for determining a characterization signature of the magnetic stripe card using the spatial characteristics, wherein the signature characterizes the magnetic stripe card.

29. The computer program product of claim 28, further comprising a computer program code portion for discarding unreliable spectral components.

30. A computer program product comprising a computer useable storage medium having computer program code embodied therein for enabling a processing device to characterize a magnetic stripe card based on spatial characteristics of data encoded on the magnetic stripe of the card, the computer-readable program code comprising:

a computer program code portion for reading data encoded on the magnetic stripe of the card;

a computer program code portion for calculating spatial characteristics of the data encoded on the card, comprising;

a computer program code portion for measuring a spatial parameter of data bits encoded on the magnetic stripe for multiple read operations;

a computer program code portion for identifying consistent variations across all bits; and

a computer program code portion for disregarding inconsistent variations for purposes of authenticating the magnetic stripe card; and

a computer program code portion for determining a characterization signature of the magnetic stripe card using the spatial characteristics, wherein the signature characterizes the magnetic stripe card.

31. The computer program product of claim 30, wherein the computer program code is configured to calculate the spatial characteristics for a plurality of read operations to determine a master characterization based on a plurality of data sets.

32. The computer program product of claim 30, wherein the characterization signature defines a master characterization signature for the magnetic stripe card.