Key management scheme for use with electronic cards

• US 5,513,261 A
• Filed: 12/29/1993
• Issued: 04/30/1996
• Est. Priority Date: 12/29/1993
• Status: Expired due to Term

• Current Assignee: American Telephone & Telegraph Company (AT&T, Inc.)
• Original Assignee: AT&T Corporation (AT&T, Inc.)
• Inventors: Maher, David P.
• Primary Examiner(s): Barron, Jr., Gilberto
• Application Number:
  US08/175,027
• Time in Patent Office: 853 Days
• Field of Search: 380/23-25, 235/380
• US Class Current: 380/277
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/4097 using mutual authentication between devices and transaction partners
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00

Abstract

In an electronic card of the type for insertion into a host electronic device for providing to the host device security parameters pertaining to the rightful holder of the card, the security parameters are stored in encrypted form to preclude their discovery by unauthorized parties. The decryption mechanism resists probing by unauthorized parties.

Claims

1. In an electronic device issued to a particular user for insertion into a host electronic device and for providing to said host electronic device, upon entry into the host electronic device of a predetermined personal identification number (PIN), parameters identifying or associated with the particular user,

means for securing the parameters against use by other then said particular user, comprising:

means for storing the parameters in encrypted form according to a key;

means for receiving the PIN from the host device;

means for computing the key as a function of at least the PIN entered by the user; and

means for decrypting the parameters according to the key.

2. The electronic device according to claim 1, wherein further:

the means for computing the key and the means for decrypting the parameters are portions of integrated circuitry of the type resistant to reverse engineering.

3. The electronic device according to claim 1 wherein further:

the means for receiving the PIN includes a delay which precludes a subsequent PIN from being accepted for a predetermined period.

4. The electronic device according to claim 3 wherein further:

the means for computing the key, the means for decrypting the parameters, and the delay are portions of integrated circuitry of the type resistant to reverse engineering.

5. The electronic device according to claim 1 further comprising:

means for storing a predetermined secret parameter;

and wherein further;

the key is computed as a function of at least the PIN entered by the user and the secret parameter.

6. The electronic device according to claim 5 wherein further:

the means for storing the secret parameter, the means for computing the key, and the means for decrypting the parameters are portions of integrated circuitry of the type resistant to reverse engineering.