Method and apparatus for improved security using access codes

• US 5,239,583 A
• Filed: 04/10/1991
• Issued: 08/24/1993
• Est. Priority Date: 04/10/1991
• Status: Expired due to Fees

• Current Assignee: Secura-Code Corporation
• Original Assignee: Secura-Code Corporation
• Inventors: Parrillo, Larry A.
• Primary Examiner(s): Gregory, Bernarr E.
• Application Number:
  US07/683,600
• Time in Patent Office: 867 Days
• Field of Search: 380/23-25, 380/4, 235/379, 235/380, 235/382, 340/825.31, 340/825.34
• US Class Current: 705/72
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G07F 19/207 Surveillance aspects at ATMs
• CPC Class Codes: G07F 7/10 together with a coded signal , e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data

Abstract

An improvement in structure and credit account access security employing method and means for ensuring that repeating an exact access code which was successful in accessing the account will be unsuccessful at the next or subsequent tries. The user enters a PIN code in accordance with a prescribed, but variable, sequence, the sequence being different for each transaction from the previous transaction. The user inputs the PIN by entering a sequence of alphanumeric symbols in accordance with a prescribed "start" sequence of symbols for recognition as a proper 4-digit PIN for a first transaction. The user must enter a new PIN to access the same account on subsequent tries. Preferably, the sequence of symbols comprising the PIN has only one symbol different from the "start" sequence for recognition as a proper PIN for a second transaction and the third transaction may require yet a third sequence of alphanumeric symbols comprising a third PIN. As many different PINs as desired can be accommodated within reasonable limits.

Claims

1. A method of controlling access to a credit account employing a system of the type which requires entry of an account information data block and a proper access code in order to conduct and conclude a transaction, the system having storage means for storing a plurality of access codes, each stored access code being uniquely associated with an account information data block, said method comprising the steps of:

(a) initiating a first transaction upon receiving a user entered account information data block for identifying a user account to be accessed in said first transaction;

(b) selecting a first stored access code responsive to entry of, and corresponding to, said account information data block;

(c) receiving a first user entered access code;

(d) comparing said selected first stored access code with said user entered access code, and, upon a match therebetween, enabling access to said credit account for successfully conducting and concluding said first transaction;

(e) disabling access to said credit account after said first transaction is concluded;

(f) replacing said first access code stored in said storage means wit a second access code different from said first access code;

(g) initiating a second transaction upon receiving said user entered account information data block a second time for identifying said user account to be accessed in said second transaction;

(h) selecting said second access code responsive to entry of, and corresponding to, said account information data block;

(i) receiving a second user entered access code;

(j) comparing said selected second access code with said second user entered access code, and, upon a match therebetween, enabling access to said credit account for successfully conducting and concluding said second transaction; and

(k) disabling access to said credit account after said second transaction is concluded;

wherein;

said replacing step includes the step of altering at least part of said selected first stored access code to define said second access code;

said access codes each include a plurality of digits; and

said altering step includes altering at least one of the digits of said stored first access code in accordance with a prescribed pattern from transaction to transaction.

2. The method as claimed in claim 1, wherein said access codes each include a plurality of digits and whereni said altering step includes altering a plurality of digits comprising said stored first access code in accordance with a prescribed pattern from transaction to transaction.

3. The method as claimed in claim 2, wherein said method includes the steps of:

receiving a user entered special digit in place of said at least one digit, said special digit being predetermined and not one of said digits in accordance with said pattern, whereby the entry of said special digit signifies an emergency situation for the user; and

issuing an emergency signal upon detecting that the special digit has been entered by the user.

4. The method as claimed in claim 1, wherein successfully conducting and concluding each transaction requires said at least one digit to change according to said prescribed pattern for all transactions completed within a twenty-four period, and wherein, after such twenty-four hour period, successfully conducting and concluding the next transaction requires entry of said first access code, following which the cycle of changing said access code in accordance with said prescribed pattern is repeated during a subsequent twenty-four hour period.

5. The method as claimed in claim 1, wherein said method includes the steps of resetting said stored access code to its original unaltered condition at prescribed time intervals.

6. The method as claimed in claim 1, including the steps of:

(l) replacing the current access code with a further access code different from said current access code;

(m) receiving said user entered account information data block a further time for identifying said user account in a further transaction;

(n) selecting said further access code responsive to entry of, and corresponding to, said account information data block;

(o) receiving a further user entered access code; and

(p) comparing said further access code with said further user entered access code, and, upon a match therebetween, enabling access to said credit account for successfully conducting and concluding said further transaction.

7. The method as claimed in claim 6, including repeating steps (l) through (p) a prescribed number of times.

8. A method of controlling access to a protected unit employing a system of the type which requires entry of a proper access code in order to disable a protective device denying access to the unit and permit a user to gain access to the unit, the system having storage means for storing a plurality of access codes, each stored access code being uniquely associated with an individual user, said method comprising the steps of:

(a) selecting a first stored access code from said plurality of stored access codes;

(b) receiving a first user entered access code;

(c) comparing said selected first stored access code with said user entered access code, and, upon a match therebetween, disabling said protective device to give access to said protected unit;

(d) enabling said protective device to again deny access to said protected unit;

(e) replacing said first access code stored in said storage means with a second access code different from said first access code;

(f) selecting said second access code;

(g) receiving a second user entered access code; and

(h) comparing said selected second access code with said second user entered access code, and, upon a match therebetween, disabling said protective device;

wherein;

said replacing step includes the step of altering at least part of said selected first stored access code to define said second access code; and

said altering step includes altering at least one of the digits of said stored first access code in accordance with a prescribed pattern from each attempt to gain access to the protected unit to the next attempt.

9. The method as claimed in claim 8, wherein said altering step includes altering a plurality of digits comprising said stored first access code in accordance with a prescribed pattern from each attempt to gain access to the protected unit to the next attempt.

10. The method as claimed in claim 9, wherein said method includes the steps of:

receiving a user entered special digit in place of said at least one digit, said special digit being predetermined and not one of said digits in accordance with said pattern, whereby the entry of said special digit signifies an emergency situation of the user; and

issuing an emergency signal upon detecting that the special digit has been entered by the user.

11. The method as claimed in claim 8, wherein successfully gaining access to the protect unit requires said at least one digit to change according to said prescribed pattern for all attempts to gain access completed within a twenty-four period, and wherein, after such twenty-four hour period, successfully gaining access requires entry of said first access code, following which the cycle of changing said access code in accordance with said prescribed pattern is repeated.

12. The method as claimed in claim 8, wherein said method includes the step of resetting said stored access code to its original unaltered condition at prescribed time intervals.

13. The method as claimed in claim 8, including the steps of:

(i) replacing the current access code with a further access code different from said current access code;

(j) selecting said further access code;

(k) receiving a further user entered access code; and

(l) comparing said further access code with said further user entered access code, and, upon a match therebetween, disabling said protective device.

14. The method as claimed in claim 13, including repeating steps (i) through (l) a prescribed number of times.

15. An apparatus for controlling to a credit account, said apparatus being of the type which has means for recognizing valid entry of an account information data block and a proper access code in order to permit a user to conduct an conclude a transaction, the system including control means for alternately denying and authorizing access to an account, memory means for storing a plurality of access codes, each stored access code being uniquely associated with an individual user, said apparatus comprising:

means for receiving a user entered account information data block and identifying a user account in a first transaction and for receiving user entered access codes;

means for selecting a first stored access code from said memory means responsive to entry of, and corresponding to, said account information data block;

means for comparing said selected first stored access code from said memory means with a user entered access code from said receiving means, and, upon a match therebetween, generating an access authorized signal routed to said control means for authorizing access to said account; and

means for replacing said first access code with a second access code different from said first access code; and

wherein;

in a second transaction, said comparing means compares said second access code with a second user entered access code from said receiving means, and, upon a match therebetween, generates an access authorization signal routed to said control means for authorizing access to said account;

said means for replacing includes means for altering at least part of said selected first stored access code to define said second access code; and

said altering means includes means for altering at least one of the digits of said stored first access code in accordance with a prescribed pattern from transaction to transaction.

16. The apparatus as claimed in claim 15, wherein said altering means includes means for altering a plurality of digits comprising said stored first access code in accordance with a prescribed pattern from transaction to transaction.

17. The apparatus as claimed in claim 15, comprising:

means for detecting receipt of a user entered special digit in place of said at least one digit, said special digit being predetermined and not one of said digits in accordance with said pattern, whereby the entry of said special digit signifies an emergency situation for the user; and

means for issuing an emergency signal upon detecting that the special digit has been entered by the user.

18. The apparatus as claimed in claim 15, comprising means for resetting said stored access code to its original unaltered condition at prescribed time intervals.

19. An apparatus for controlling access to a protected unit, said apparatus being of the type which has means for recognizing valid entry of a proper access code in order to disable a protective device and permit a user to gain access to the unit, the system including control means for alternately denying and authorizing access to said unit, memory means for storing a plurality of access codes, each stored access code being uniquely associated with an individual user, said apparatus comprising:

means for receiving user entered access codes;

means for selecting a first stored access code from said memory means;

means for comparing said selected first stored access code from said memory means with a user entered access code from said receiving means, and, upon a match therebetween, generating an access authorized signal routed to said control means for disabling said protective device;

means for replacing said first access code with a second access code different from said first access code; and

wherein, in a second transaction, said comparing means compares said second access code with a second user entered access code from said receiving means, and, upon a match therebetween, generates an access authorization signal routed to said control means for disabling said protective device;

wherein

said means for replacing includes means for altering at least part of said selected first stored access code to define said second access code; and

said means for altering includes means for altering at least one of the digits of said stored first access code in accordance with a prescribed pattern from each attempt to gain access to the protected unit to the next attempt.