Secure smart card system

• US 8,814,052 B2
• Filed: 08/19/2009
• Issued: 08/26/2014
• Est. Priority Date: 08/20/2008
• Status: Active Grant

• Current Assignee: X-Card Holdings LLC
• Original Assignee: X-Card Holdings LLC
• Inventors: Bona, John Kenneth, Cox, Mark Allan
• Primary Examiner(s): Savusdiphol, Paultep
• Application Number:
  US13/059,433
• Publication Number:
  US 20110140841A1
• Time in Patent Office: 1,833 Days
• Field of Search: 235/380, 235/487, 235/492, 235/493
• US Class Current: 235/492
• CPC Class Codes: G06K 19/06187 with magnetically detectable marking
• CPC Class Codes: G06K 19/06196 Constructional details
• CPC Class Codes: G06K 19/07 with integrated circuit chips
• CPC Class Codes: G06K 19/0702 the arrangement including a battery
• CPC Class Codes: G06K 19/0718 the sensor being of the biometric kind, e.g. fingerprint sensors fingerprint sensors in general G06V40/13; biometric access-control systems in general, see G07C9/00
• CPC Class Codes: G06K 19/0719 at least one of the integrated circuit chips comprising an arrangement for application selection, e.g. an acceleration sensor or a set of radio buttons application selection on smart cards using pure software control, see G07F7/10
• CPC Class Codes: G06K 19/0723 the record carrier comprising an arrangement for non-contact communication, e.g. wireless communication circuits on transponder cards, non-contact smart cards or RFIDs
• CPC Class Codes: G06K 19/07703 the interface being visual
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/34 using cards, e.g. integrated circuit [IC] cards or magnetic cards
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/352 Contactless payments by cards
• CPC Class Codes: G06Q 20/3574 Multiple applications on card
• CPC Class Codes: G06Q 20/4018 using the card verification value [CVV] associated with the card
• CPC Class Codes: G07F 7/0846 On-card display means

Abstract

A smart card usable in magnetic stripe swipe transactions with a transaction terminal configured to read transaction information encoded on a magnetic stripe of a standard transaction card includes a card body, which includes a magnetic stripe emulator for use with the transaction terminal, a smart card chip programmed with at least one transaction application for providing secured data for use in a transaction and dynamic card verification data, a power supply, and a card controller in communication with the magnetic stripe emulator. The card controller is configured to receive the dynamic card verification data and control the magnetic stripe emulator to emit a magnetic field encoded with at least a portion of the secured data and the dynamic card verification data.

Claims

1. A smart card usable in magnetic stripe swipe transactions with a transaction terminal configured to read transaction information encoded on a magnetic stripe of a standard transaction card, the smart card comprising a card body, which comprises:

a magnetic stripe emulator for use with the transaction terminal;

a smart card chip programmed with at least one transaction application for providing secured data for use in a transaction and dynamic card verification data;

a card controller separate from the smart card chip in communication with the magnetic stripe emulator, wherein the card controller is configured to receive through an interface to a source external to the smart card the dynamic card verification data provided by the smart card chip and control the magnetic stripe emulator to emit a magnetic field encoded with at least a portion of the secured data and the dynamic card verification data; and

a power supply.

2. The smart card of claim 1, wherein the card body further comprises at least one of a smart card contact pad and a wireless interface for interfacing with a smart card reader.

3. The smart card of claim 1, wherein the card body comprises stored biometric data corresponding to an authorized user of the smart card.

4. The smart card of claim 3, wherein the smart card chip includes an authentication application for authenticating received biometric data against the stored biometric data.

5. The smart card of claim 4, wherein the received and stored biometric data comprise fingerprint data.

6. The smart card of claim 4, wherein the card body further comprises a biometric sensor on a face thereof.

7. The smart card of claim 1, wherein the smart card chip includes a plurality of transaction applications, each transaction application providing respective secured data for use in a transaction.

8. The smart card of claim 7, wherein the plurality of transaction applications correspond to two or more of a credit transaction application, a debit transaction application and an information access control application.

9. The smart card of claim 7, wherein the card body further comprises a user interface on a face thereof for enabling user selection among the plurality of transaction applications resident in the smart card chip for use.

10. The smart card of claim 1, wherein the card body further comprises a display in communication with the card controller.

11. The smart card of claim 10, wherein the card controller displays the dynamic card verification data on the display.

12. The smart card of claim 10, wherein the card controller displays on the display information for use in authorizing a card-not-present transaction.

13. The smart card of claim 1, wherein the magnetic stripe emulator includes two or more emulated magnetic stripe tracks.

14. The smart card of claim 1, wherein an incremented transaction number is encoded with the secured data and the dynamic card verification data in the magnetic field.

15. The smart card of claim 1, wherein the card body further comprises a smart card interface in communication with the smart card chip for providing data to the source external to the smart card.

16. A smart card activation unit comprising:

one or both of a contact and contactless interfaces for communicating with a smart card chip of a smart card;

an activation unit controller configured to receive from the smart card chip through the interfaces smart card transaction data including secured data from the smart card chip for use in a transaction and a dynamic card verification data, and to format at least some of the secured data and the dynamic card verification data into magnetic stripe transaction data; and

a card interface through which the activation unit controller provides magnetic stripe transaction data to the smart card for use in a magnetic stripe transaction.

17. The smart card activation unit of claim 16, further comprising:

a display; and

user input means operable with the display for selecting among transaction applications available on the smart card.

18. The smart card activation unit of claim 16, further comprising a biometric sensor for capturing biometric information from a presented user, wherein the activation unit controller provides a signal corresponding to the captured biometric information to the smart card for on-card comparison of the captured biometric information with stored biometric information.

19. The smart card activation unit of claim 16, wherein the activation unit controller controls the display to provide an indication to the presented user that the smart card is ready for use in a transaction.

20. The smart card activation unit of claim 16, wherein the smart card activation unit has a slot in which the smart card is received.

21. The smart card activation unit of claim 16, further comprising a battery power source.

22. A smart card usable in both magnetic stripe transactions and contact or contactless smart card transactions, comprising a smart card body, the smart card body comprising:

a smart card chip programmed with at least one transaction application for performing smart card transactions, the smart card transactions involving transmission to a smart card reader of smart card transaction data including secured data and dynamic card verification data dynamically developed by the smart card chip, wherein the smart card chip is also programmed with a biometric match on card application for authenticating a user against pre-stored user biometric information;

a smart card interface for interfacing the smart card chip with a smart card reader;

a magnetic stripe emulator for interfacing the smart card with a magnetic stripe reader configured to read transaction information encoded on a magnetic stripe of a transaction card;

an internal power supply;

a card controller in communication with the magnetic stripe emulator, wherein the card controller controls the magnetic stripe emulator to emit a magnetic field encoded with magnetic stripe transaction data, wherein the magnetic stripe transaction data includes the dynamic card verification data and at least some of the secured data from the smart card transaction data, wherein the card controller is configured to receive the magnetic stripe transaction data from a source external to the smart card; and

a display under the control of the card controller.