Multi-issuer transaction device with individual identification verification plug-in application modules for each issuer

• US 4,961,142 A
• Filed: 06/29/1988
• Issued: 10/02/1990
• Est. Priority Date: 06/29/1988
• Status: Expired due to Term

• Current Assignee: Mastercard International Incorporated (MasterCard Incorporated)
• Original Assignee: Mastercard International Incorporated (MasterCard Incorporated)
• Inventors: Elliott, John C., Altman, William, Ladouceur, Lawrence, Jarett, Keith, O'Connell, James A.
• Primary Examiner(s): NOT, DEFINED
• Application Number:
  US07/212,892
• Time in Patent Office: 825 Days
• Field of Search: 364/408, 235/379, 235/384, 902/26, 380/24
• US Class Current: 705/73
• CPC Class Codes: G06Q 20/1085 involving automatic teller machines [ATMs]
• CPC Class Codes: G06Q 20/3552 Downloading or loading of personalisation data
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G07F 7/005 Details or accessories
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

A transaction terminal for use with diverse credit or other transaction cards is provided with an interface unit for receiving a plurality of modules, wherein each module contains programming information corresponding to transactions that may be carried out with at least one of the diverse identification cards presented to the machine. Accordingly, financial institutions who issue cards can independently arrange and program their own security and transaction routines which are to be carried out with the cards and distribute such routines in a secure manner for use on a common terminal.

Claims

1. An electronic transaction device for performing transactions with any one of a plurality of diverse personal transaction identification devices, said identification devices including stored identification data and adapted to be used for diverse transaction function, said plurality including at least one personal identification device having a device microprocessor and a device program for use in transactions, comprising:

first interface means for receiving any of said personal transaction identification devices for generating first data signals corresponding to said stored identification data;

second interface means, including a plurality of receiving portions, for simultaneously receiving a plurality of program modules, and for generating second data signals corresponding to data stored on said program modules;

at least one program module connected to one of said receiving portions of said second interface means and including a module microprocessor, a module program for operating said module microprocessor, and a transaction program for carrying out portions of said transactions with said microprocessor containing personal identification device;

and a first data processing means, coupled to operate and receive data signals from said first and second interface means and including a control program responsive to said first data signals for selecting a program module, and for executing said transaction program.

2. An electronic transaction device as specified in claim 1, wherein said control program includes means for loading said second data, corresponding to a transaction program, into the first data processing means for executing the transaction program in the first data processing means.

3. An electronic transaction device as specified in claim 2, wherein there is further provided means for providing data communication between said first data processing means and one or more remote data processing means, and wherein said data communication means is operated under control of said transaction program.

4. An electronic transaction device as specified in claim 2, wherein said first interface means includes means for providing data to said personal identification device, and wherein said data providing means is operated under control of said transaction program.

5. An electronic transaction device as specified in claim 4, wherein at least one of said program modules includes means for encrypting data either received from said personal identification device or generated by said module and wherein said first interface means provides said encrypted data to said personal identification device.

6. A method for executing a transaction using a personal identification device having stored identification data and an electronic transaction device, adapted to receive said identification device and read identification data therefrom, said transaction device including data processing means including a first control program and a plurality of program modules, said modules each including a module microprocessor, at least one stored transaction program and at least one stored module program for operating said module microprocessor, comprising:

connecting said identification device to said transaction device;

operating said data processing means of said transaction device under said control program to read said identification data from said identification device and to select one of said program modules and one of said stored transaction programs in accordance with said identification data;

operating said data processing means of said transaction device under said control program to load said selected transaction program from said selected program module;

operating said data processing means of said transaction device under said selected transaction program to execute portions of a transaction;

and operating said module microprocessor under said module program to execute portions of a transaction.

7. A method as specified in claim 6 for use with a personal identification device having a device, microprocessor a plurality of program modules each having a primary encrypting key, further comprising operating said module microprocessor under said module program to compute said derived encryption key from said identification data.

8. A method as specified in claim 7, further comprising the step of supplying a number to said device microprocessor and said module microprocessor, encrypting said number in said module microprocessor with said derived encryption key, decrypting said encrypted number in said device microprocessor and comparing said supplied number to said decrypted number.

9. A method as specified in claim 7, further comprising the step of supplying a number to said device microprocessor and said module microprocessor, encrypting said number in said device microprocessor and decrypting said encrypted number in said module microprocessor and comparing said supplied number to said decrypted number.

10. A method as specified in claim 7, further comprising encrypting a supplied number in said module microprocessor, said supplied number corresponding to data stored in said device, decrypting said encrypted supplied number in said device microprocessor and comparing said decrypted number to said stored data.

11. A program module for use in a transaction terminal of the type accepting personal transaction identification devices, wherein said devices include stored identification data, and wherein said transaction terminal includes a first interface means for receiving said personal transaction identification devices for generating first data signals corresponding to the stored identification data;

a second interface means with at least two terminal connector means for detachably receiving program modules, said second interface means for generating second data signals corresponding to data stored in said program modules; and

processor means within said transaction terminal for receiving data signals from said first and second interface means and including a control program responsive to said first data signals for selecting a program module;

said program module comprising;

a module microprocessor;

module connector means for connecting said module microprocessor to said terminal connector means for communication with the terminal processor means;

a module program for operating said module microprocessor; and

a transaction program executed by said terminal processor means for carrying out transactions with said personal transaction identification devices.

12. A program module as defined in claim 11, further including means for processing a stored encryption program and at least one stored key.

13. A program module as defined in claim 12, wherein the module includes electronic memory for storing said programs and said at least one stored key and is in the form of a card for housing said module microprocessor and memory.