System and process for identification of persons requesting access to particular facilities

• US 4,471,216 A
• Filed: 10/27/1980
• Issued: 09/11/1984
• Est. Priority Date: 11/09/1979
• Status: Expired due to Term

• Current Assignee: Compagnie Internationale Pour L'Informatique Cii-Honeywell Bull
• Original Assignee: Compagnie Internationale Pour L'Informatique Cii-Honeywell Bull
• Inventors: Herve, Robert J. L.
• Primary Examiner(s): Rubinson, Gene Z.
• Assistant Examiner(s): Lev, Robert
• Application Number:
  US06/200,785
• Time in Patent Office: 1,415 Days
• Field of Search: 235/379, 235/380, 235/487, 235/492
• US Class Current: 235/380
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

The user has a credit card incorporating electronic devices and/or circuits. The facility which is to be protected has an electronic device and/or circuit analogous to that of the credit card. The devices of the credit card and of the facility contain in their respective memories a secret code S, an identification code I_n, and a program p. The facility which is to be protected has available a generator of a random code E which is transmitted into each of the devices when a request for access is made. The devices within the card and the facility each calculate the function R=p(S, E, I_n), and a comparator situated in the facility which is to be protected compares the functions supplied by each of the devices to allow or deny access of the person to the said facility.

Claims

1. A process for validating the identification of persons by the presentation of a portable object carried by a person to an apparatus, the portable object including a first memory within which are recorded a first secret code S, a first identification code I_n and a first program p, and a first processor for processing the data recorded in the first portable object memory, and the apparatus including a second memory within which are recorded a second secret code S, a second identification code I_n and a second program p, and a second processor for processing the data recorded in the second apparatus memory, the second codes S and I_n and the second program p recorded in the second memory of the apparatus having a predetermined relationship to the first codes and the first program recorded in the first memory of the portable object;

said process comprising;

reading the first identification code I_n recorded in the first memory of the portable object;

identifying whether the first identification code is plausible;

generating a random number E and transmitting the random number to the first and second processors if the first identification code I_n is plausible;

calculating in the two processors respective codes R and R'"'"' as a function of the random number of the respective programs p and of the respective identification I_n and secret S codes; and

comparing the codes R and R'"'"' calculated by the two processors to verify the verisimilitude of the secret code S and of the program p recorded in the memory of the portable object.

3. The process of claim 1, wherein said predetermined relationship is one of equality between the first and second codes and programs.

4. The process of claim 1, wherein said calculating in each processor comprises forming a first intermediate result by concatenating the random number with the identification code;

forming a second intermediate result by an exclusive-OR operation between the secret code and the first intermediate result; and

calculating said code R or R'"'"' by multiplying the secret code by the first and second intermediate results.

2. A system for validating identification of persons, said system comprising:

a portable object adapted to be carried by a person, the portable object including a first memory adapted to have recorded therein a secret code S, an identification code I_n and a program p, and a first processor for processing the data recorded in said first memory; and

a facility having means for receiving said portable object and including a second memory wherein are recorded a secret code S, an identification code I_n and a program p, and a second processor for processing the data recorded in said second memory, the codes S and I_n and program p stored in said second memory being identical to those recorded in the first memory of said portable object, said facility further including first means for identifying the identification code I_n recorded in the first memory of the portable object, second means for generating a random number signal E and for transmitting the random number signal to each of said processors, each of said processors being responsive to the random number signal for generating respective code signals R and R'"'"' which are a function of the random number signal E transmitted by the said second means and of the identification I_n and secret S codes recorded in the first and second memories, and third means for comparison of the codes R and R'"'"' generated by the said first and second processors to verify the verisimilitude of the secret code S and of the program p recorded in the portable object.

5. The system of claim 2, wherein said second memory and second processor are similar to the first memory and the first processor respectively.

6. The system of claim 2, wherein the portable object comprises a credit card embodying said first memory and said first processor.

7. The system of claim 2, wherein the first memory has a secret zone in which reading and writing are permitted only by the first processor and wherein said secret code is stored in said secret zone.