Security system for electronic funds transfer system

• US 4,408,203 A
• Filed: 11/10/1980
• Issued: 10/04/1983
• Est. Priority Date: 01/09/1978
• Status: Expired due to Term

• Current Assignee: Mastercard International Incorporated (MasterCard Incorporated)
• Original Assignee: Mastercard International Incorporated (MasterCard Incorporated)
• Inventors: Campbell, Carl M.
• Primary Examiner(s): YUSKO, DONALD
• Application Number:
  US06/205,295
• Time in Patent Office: 1,058 Days
• Field of Search: 340/825.31, 340/825.34, 178/22.08, 235/379, 235/382
• US Class Current: 705/71
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/0822 using key encryption key
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083

Abstract

A security system, particularly useful in an electronic funds transfer system, makes use of secret identification codes known only to system users. The codes are encrypted upon insertion into the system and are stored in a data processing unit in encrypted form. A security module is used to decrypt the code entered by a user and compare it to the corresponding encrypted code stored in the data processing unit.

Claims

1. In a system having a data processing unit and at least one transaction terminal, for automatically processing data entered at said terminal by an authorized person, apparatus for verifying the identity of said authorized person, comprising:

manual code entry means at said terminal, for receiving a secret code entered by said person and for generating first electrical signals representative of said code;

encrypting means at said terminal, associated with said manual code entry means, and responsive to said first electrical signals and a first encrypting key, for generating second electrical signals representative of said secret code encrypted by said first key;

means at said terminal for receiving identifying information other than said secret code, and for generating third electrical signals representative of said identifying information;

storage means, associated with said data processing unit for storing a plurality of signals representative of a plurality of said secret codes, each encrypted by a second encrypting key, said storage means including means responsive to said third electrical signals for selecting one of said encrypted stored codes;

a security module, separate from said data processing unit and in communication therewith, responsive to said second electrical signals and said selected encrypted stored code, for decrypting said second electrical signals and said selected encrypted stored code and for providing an output indication to said data processing unit if said second electrical signals are representative of said selected stored code, said security module being operationally arranged to prevent output of said code in decrypted form;

and system enabling means, associated with said data processing unit, and responsive to said output indication for allowing the automatic processing of data entered by said person at said terminal.

2. Apparatus as specified in claim 1 wherein said storage means additionally stores said first encrypting key in encrypted form and wherein said security module decrypts said first key.

3. Apparatus as specified in claim 2 wherein there are provided a plurality of said terminals, each of said terminals having a unique first encrypting key, wherein there are provided means for generating fourth electrical signals representative of terminal identity, wherein said storage means stores said unique first encrypting key for each of said terminals and wherein said storage means includes means, responsive to said fourth electrical signals, for selecting one of said encrypted first encrypting keys and supplying said selected key to said security module.

7. Apparatus as specified in claim 1 wherein there are provided a plurality of said terminals, each of said terminals having a unique first encrypting key, wherein there is provided a memory associated with said security module for storing said first encrypting keys, wherein there are provided means for generating fifth electrical signals representative of terminal identity, and wherein there are provided means associated with said security module and responsive to said fifth electrical signals, for selecting one of said first encrypting keys.

8. Apparatus as specified in claim 7 wherein said memory stores said first encyrpting keys in encrypted form and wherein said security module decrypts said first encrypting keys.

4. In a system having a data processing unit and at least one transaction terminal, for automatically processing data entered at said terminal by an authorized person, apparatus for verifying the identity of said authorized person, comprising:

manual code entry means at said terminal, for receiving a secret code entered by said person and for generating first electrical signals representative of said code;

encrypting means at said terminal, associated with said manual code entry means, and responsive to said first electrical signals and a first encrypting key, for generating second electrical signals representative of said secret code encrypted by said first key;

means at said terminal for receiving identifying information other than said secret code, and for generating third electrical signals representative of said identifying information;

a security module, separate from said data processing unit and in communication therewith, and responsive to said second electrical signals for decrypting said second electrical signals to derive said first electrical signals, and for re-encrypting said first electrical signals using a second encrypting key to derive fourth electrical signals representative of said secret code encrypted by said second key, and for providing said fourth electrical signals as an output to said data processing unit, said security module being operationally arranged to prevent output of said first electrical signals;

storage means, associated with said data processing unit for storing a plurality of signals representative of a plurality of said secret codes, each encrypted by a second encrypting key, said storage means including means responsive to said third electrical signals for selecting one of said encrypted stored codes;

and system enabling means, responsive to said selected encrypted stored code and said fourth electrical signals, for comparing said code and said signals and allowing the automatic processing of data entered by said person if said code and said signals are the same.

5. Apparatus as specified in claim 4 wherein there are provided a plurality of said data processing means, each having a unique second encrypting key, wherein there are provided means, including a memory for storing said second encrypting keys, associated with said security module and responsive to said third electrical signals, for selecting one of said second encrypting keys and supplying said selected second key to said security module.

6. Apparatus as specified in claim 5 wherein said memory stores said second encrypting keys in encrypted form and wherein said security module decrypts said second encrypting keys.